Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1048-55-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    8af2dbd72e8848483e0e8062422ae18c

  • SHA1

    75091ef5600e4343ebfe495afad75ef6e078cc68

  • SHA256

    1c339908b371ada02d2d43499c8ad7f48c37fe646a4abc0af6452d5271814940

  • SHA512

    9dee12b46b3464ffd9c96a654739f5aa285fbc1fe6f4c9c382576614b2b770a0e7a721a9aa4ee4236fd2b11364925617d033bf5d5cae5d08abb7033ca25dd91c

  • SSDEEP

    1536:wlpD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:CDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://194.180.48.58/web/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1048-55-0x0000000000220000-0x000000000023B000-memory.dmp