General
-
Target
556-95-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
MD5
ff091dad57720017a63d6bc9713e43bb
-
SHA1
8c1a1e42c2b21b2e1d08e5542d6057bfb90c8b76
-
SHA256
65859174f54fdfe052de2370b44348204c0de0ce9f02895857a95619789cc55e
-
SHA512
42993d2cc3136d3b970ee620e78741f913f5fc75cb36ee30afd74e3d53cbe76fd954839d384efc3f040eaf5157b1b5ef8a33dde89fc55c81875a2c68b251120f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqgIzmd:nSHIG6mQwGmfOQd8YhY0/EZUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://216.128.145.196/~wellseconds/?p=9651
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
556-95-0x0000000000400000-0x0000000001462000-memory.dmp
Headers
Sections