General
-
Target
1852-1090-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
942a99dab9a2ab8e30e729a7cd698f00
-
SHA1
fd22d66218ccf1d919c18640c3f58b6161d21a36
-
SHA256
082ddb4ba86cad6d0fc2ff3ae6af2f5f84ac9cede142a6673cf9e1bfe70d2f06
-
SHA512
b807d1ba3c229908702432c93a5882bf8860c4fcb9e148cd320a8d7674c11e8c61475f232a7a83847e3d7f3531a29e1c0d11fe340d3eee6c8bf8b87212264e27
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq2Izmd:nSHIG6mQwGmfOQd8YhY0/EHUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://163.123.143.202/_errorpages/collins/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1852-1090-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections