General

  • Target

    2196-56-0x00000000001B0000-0x00000000001CB000-memory.dmp

  • Size

    108KB

  • MD5

    22d11dae4aa8a49918198d295e71439e

  • SHA1

    5e77a33cacda826e4eedea40eb596cc6b1e39291

  • SHA256

    d9df6aa511e936a120f84441b7cc7a0d06815b375389ac3603e4fcf22c09af0a

  • SHA512

    6a4135afdc364432a882004c90dd949925696b9573e898a0bc6bfe55d0ef17eadc397872abcd5707876a176f530ca39cce527754171806512f07740100f3cdd6

  • SSDEEP

    1536:YlDD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:4DMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://194.55.224.9/fresh1/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 2196-56-0x00000000001B0000-0x00000000001CB000-memory.dmp