Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    384-81-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    1e42913a2e9e17c894d1bd8110a798c8

  • SHA1

    061601d15055e930c72ac5d94913c0e988c01990

  • SHA256

    0cfe98b1627862a31bcefc7f9f69daeb41f0cf615a8657905a0776a93f4e7c43

  • SHA512

    3fdd09ddcc4e3cd8d2de0d0e4fd4f8880ffded08090ce89d6c307569f2d4b108cf6a207cc2d89c6188c7e5060dddc9330452ad0c7da286153675f8ff61d677e8

  • SSDEEP

    1536:wlbD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:8DMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/mancho/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 384-81-0x0000000000220000-0x000000000023B000-memory.dmp