General
-
Target
2228-66-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
3db8d528fbfe42045e8132ef9bd92d25
-
SHA1
e6d1b5dd2298424cd7c8dff8576a305007797224
-
SHA256
23cafd0093da949e0e4f07c3189a130898a27b58c64a2ba34f9c11cd51bf8e87
-
SHA512
1e56b7950ee314bb83f8aa724ab46b732247b60e6c4689296d81af4189b3367e4e0f4db94672175bfe6a81c4511c6c462aafafafaa91ab033fcc697d2ad1b8a6
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://185.246.220.85/ugopounds/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2228-66-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections