General
-
Target
1504-28-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
7e02c55e190c6ab7a0aee1e112904b58
-
SHA1
1bbc4165d34192a76060ea9795b3550d40cce702
-
SHA256
154b7dc0ef25203921467841d7f986a11d72652ef5b650a34e0e31a25d71ac8f
-
SHA512
ee73e195a4da044216aadcb4bfe70611db5f3690d9d7088c63b5286204694ce430be91649c63be86dfe7dd4725df2983d3fee23ae24c9319a7f8c946c9caf19a
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://moore.meyervanderwalt.top/_errorpages/moore/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1504-28-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections