Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1604-75-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    c5ffff30fa819a2e280b7facf18d748c

  • SHA1

    2e6a11e2b402dbf0b2e816d3bc0ef049bc84f829

  • SHA256

    17c9cc6b596374fd00dd6aaa767e3f35b957e8dd78d3f20bcecbeef27c559858

  • SHA512

    f49b03dc71874c4bc1b5f7537d1e5521785c83c80f4d270ebee6e16006389bc53820f162a664daddf20dd33eaf9249149621b57a7fa3bcbb5760a2ae6f55cb32

  • SSDEEP

    1536:wlvD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:4DMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibot

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/chang3/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1604-75-0x0000000000220000-0x000000000023B000-memory.dmp