General
-
Target
660-69-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
ca04412c251f983b165394a08ee2282e
-
SHA1
80abf6baa1f2817344f6ee96320abefca895a339
-
SHA256
36e90e758c45e49b39af302a4b0a24bb59165cfb744be0a75c687cff1b9b8321
-
SHA512
6c7ae756536e370c7c1400df64a5fb7e9035708fb93ccf9fff068edbe2709d59544e149bf4d61660a8946c1d136b43eac30ff95eb31304d1e4129c46e576bc2e
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqsIzmd:nSHIG6mQwGmfOQd8YhY0/EpUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://194.180.48.58/black/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
660-69-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections