General
-
Target
2172-55-0x00000000001C0000-0x00000000001DB000-memory.dmp
-
Size
108KB
-
MD5
1648960ab171ac2ceac682cb70af9ecb
-
SHA1
b753d83e26acd737ef2a0820ae8c74038925b0a7
-
SHA256
441d99210c8f806c57ee50d7558bf27eda8578443c8f75fb469da76b8de21956
-
SHA512
c4e7f570e100873642fe631494b3b50a0d4b37143d1ac2082080f5cc90a751cd7ebed40fed6c9fe161d18a0e5092ce516ae227b00accc93ae2e7c120069516f8
-
SSDEEP
1536:wlrD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:gDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://171.22.30.147/mous/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
2172-55-0x00000000001C0000-0x00000000001DB000-memory.dmp