General
-
Target
1460-63-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
383e436d0117cfb547ed2dafef5001ca
-
SHA1
81da26bc7c06fa009ebf0ddef93fc7c80256044b
-
SHA256
b837f6d789348913ace221056684ebc8359ec039e5273b693823492fceb01bdd
-
SHA512
fbed9974fd23afc75f15828c49722c3534fb1db405170510cf985b5fe3cceb393c1bc4f176fabd66754a7d058bd431df1f1f15fe92e32725376029c000b826cb
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://eyecos.ga/choolee/gate.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1460-63-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections