General
-
Target
2196-56-0x00000000001B0000-0x00000000001CB000-memory.dmp
-
Size
108KB
-
MD5
22d11dae4aa8a49918198d295e71439e
-
SHA1
5e77a33cacda826e4eedea40eb596cc6b1e39291
-
SHA256
d9df6aa511e936a120f84441b7cc7a0d06815b375389ac3603e4fcf22c09af0a
-
SHA512
6a4135afdc364432a882004c90dd949925696b9573e898a0bc6bfe55d0ef17eadc397872abcd5707876a176f530ca39cce527754171806512f07740100f3cdd6
-
SSDEEP
1536:YlDD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:4DMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://194.55.224.9/fresh1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
2196-56-0x00000000001B0000-0x00000000001CB000-memory.dmp