General
-
Target
2132-88-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
5ccd8798292e3c1a9727c4b99810354a
-
SHA1
b9bb66240ac5c73bc635010a757ac5984ef0166a
-
SHA256
d3729124e5d8f2be21d0dd7785c189ff7da83d783c84c87fc1d7ca6fb381b0c1
-
SHA512
b0d03d7842cd608eff5726d78bb7cfd7bd6c7e783b5a149e49eccb1d2d6b83d602db6ac744fa976172d05baa81cae7194b2aad593a4104ba522d93faac2356a7
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://194.55.224.9/luiz/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2132-88-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections