General
-
Target
2708-15-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
2a80ec4179b4ec95d7e5cc5bc3082cd4
-
SHA1
c6bb53a911049d1d89ad63b092af4cd7272ee691
-
SHA256
684f752e2e17a5c9de90c9ff63fc255db48eee1d5ea1aa718aed164b038fed2c
-
SHA512
f7284d564f60e3c872abe8021eefb47cecf0f199c9e88a8ce6f4e9c7434308ae05ccf15a54be666744812037e5b389d3744460d23f80da9e0977e4b440df786b
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://45.77.76.224/~clinics/8K32GLwm2PLH6uzEVro14x4w8r
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2708-15-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections