General

  • Target

    1104-176-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    a96fbbb0a3f5d1b1bbfd80402b2d3e22

  • SHA1

    0f0c22a36df24da3880c732903485ed56b36f288

  • SHA256

    e6e6e8cb4f0c3fa62f6924257922f36107a95bdf6e56951ac4144adc9deeead3

  • SHA512

    b1a7f281748951cd2b164a24384e7f4d433a44bee010a7aa3c594206870bef41c958425fabba32bc7e7933d469f899d9f3ee71ec3207b974e09e3bc922d3f3fe

  • SSDEEP

    1536:wlHD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:gDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/chang3/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1104-176-0x0000000000220000-0x000000000023B000-memory.dmp