General
-
Target
4284-1091-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
4764d3e529150112bf80747570cbf5a1
-
SHA1
c7c136935d4193424ec92597c09604a954b1605d
-
SHA256
f19d061b3210c917195b28bd472360dc3e289d34c41e91e5ab1b66b0709c3996
-
SHA512
a76e9239885956152096e35fd2c8a3d936266ce3323362fefdc17dca1e9a9651bd2f21d8d35189a4d43b92f0a7efa86476a3130f13cd567a3a3df3ec720bc60f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqPIzmd:nSHIG6mQwGmfOQd8YhY0/E2UG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://163.123.143.202/_errorpages/collins/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4284-1091-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections