General
-
Target
2300-66-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
f2c34ff4164e074cd483739604734f72
-
SHA1
f5763196909015cb4fc27f2231041c323ad67a1a
-
SHA256
7d8abbc00560907082c34144545fadf2dd498a3ad0044fb617b3cf0413b6d83d
-
SHA512
5852c6cfb54c11e1060dfb238357f67ccd74c8ccf40714ea5a0616da7201853628f7a2779c614a9a13b84b332b799c041d8b9fd3604ea8c68325f09d3c5385a4
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://185.246.220.60/zino/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2300-66-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections