Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-55-0x00000000003C0000-0x00000000003DB000-memory.dmp

  • Size

    108KB

  • MD5

    7ca309d9a83089391d43fe2d826479d7

  • SHA1

    ce15c0d29f08296fcd105df8f37dfc1a70c1357f

  • SHA256

    982fc74e68642e96b3c8de2790ae6c0ba39a9ddaaf6a506b895e7a3327c51ee5

  • SHA512

    a23f7a013878d9e135ed69761c4712021df1d262c0d8cc9cf4c05ddad558afd8db6e56b80c5b2dc786ca8e8dfa248440ec0e8abdecfdb0cb98c52302e3ac211d

  • SSDEEP

    1536:wljD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:IDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/line/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2024-55-0x00000000003C0000-0x00000000003DB000-memory.dmp