General
-
Target
2396-93-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
MD5
828c16c26dd66293a1dbf324197ef0df
-
SHA1
e6d881ccc8668e50be5ab4b0191ef4637572c117
-
SHA256
3c07fa0b32a03a0000a2341ee34f5265b68d22e0548ec51993dc265da177601d
-
SHA512
86f8dc524c46e544153b902f8fbdc179a1e8233677e36b170feff16b3c2f116c7c4d39693ebd611d64be9ad796268ca2768ffbefe338b7d6dfd0c8dbf6adf011
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqVIzmd:nSHIG6mQwGmfOQd8YhY0/EQUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://216.128.145.196/~wellseconds/?p=9651
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2396-93-0x0000000000400000-0x0000000001462000-memory.dmp
Headers
Sections