General
-
Target
1948-1152-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
a72118275e0e05f7f5383cf548f34aa1
-
SHA1
69f34103cefdaf2c5e38b008d735df0dcb7856cb
-
SHA256
178061bb8412374fa3aeb4eb0bbe2ef19ff447b7741d19562c2ae7af0cde366c
-
SHA512
246173b7f567018fd071adee485f62a1c0c82a4b2c9d6c6cc5acf6afaf758292865d756b92fbc8b101f858131a820b26408cdabb689db22f2fb0a16c983abf63
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq0Izmd:nSHIG6mQwGmfOQd8YhY0/E1UG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://194.55.224.10/collins/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1948-1152-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections