Overview

overview

10

Static

static

10

Resubmissions

12/05/2023, 14:30

230512-rvjg5aff5t 10

12/05/2023, 14:30

230512-rvfq8sdd88 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1180-55-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    4f4feb019ca9c162965fbb00911b325a

  • SHA1

    670973e1893ba08b1ec02ba8e3ab0181c90e8782

  • SHA256

    1841b3a91e3648342aaf814cdb5bf8c74dcef91049badef0e863434856004a24

  • SHA512

    6d9daaf11380d3b85309a19fbca02ccd622a9d014471076c36279a7edd5dca64d359469597685d15a36cdf213c6632fb493e067cef1fe27a90ce68f398f0f438

  • SSDEEP

    1536:wlrD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:gDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/kung/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1180-55-0x0000000000220000-0x000000000023B000-memory.dmp