General
-
Target
2260-67-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
a63d0aee3648399a02ce2c4ee33027d7
-
SHA1
9d7111598ed383eb576d93b7cbf4e2d2d2b553b7
-
SHA256
6dba09cb6be2f7a18e4f0ddf121be0642f8f432e7ffe9d489fa5b1306e868440
-
SHA512
d057af8d743896a5c09a4a01c9063ebc14ecde36542feeb133efdf62c9262be0f1a68e0e6f86c760dff18bc357896d31b45915de138c12effad45bbf81ace518
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq8Izmd:nSHIG6mQwGmfOQd8YhY0/ExUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://138.68.56.139/?p=370764885722297
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2260-67-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections