General
-
Target
1104-67-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
55b8043b75d6bf62c8e2090fb968265e
-
SHA1
6e4a1fb3cdbcf17f8690dd203d18913d955c7bc1
-
SHA256
cd7d40790d89f21da94fb74d852081290933c102e97f0527d239e0d4cb040c0d
-
SHA512
9e75024ab085eb0e3b4b71af6e2c27e2fd58c45fc9aff4d48f6228d9645f3ec787d5c99466e7840fa6467d01c0bebc4de680dfcbc33a97c87705ba3f5c8b7e41
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://161.35.102.56/~nikol/?p=61353
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1104-67-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections