General
-
Target
1700-68-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
MD5
cb5fa525206055ccd55660e618f8e027
-
SHA1
c3fe41b7a29171abac6b6a2ea7767d53b8935dad
-
SHA256
762908258e572a1440c4300014feebba02c0678c6630e4d71391a17ff6e7af66
-
SHA512
21c02dcccbd08f79c939ad673f891e44de14ae0a17df873d0671d2a762e7f040cf5320b6f770319f3396d7df2cf17d4e763d69a5c7cf67f3e1ef9accc43b8017
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqDIzmd:nSHIG6mQwGmfOQd8YhY0/EWUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://185.246.220.85/chang1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1700-68-0x0000000000400000-0x0000000001462000-memory.dmp
Headers
Sections