General
-
Target
2236-2-0x0000000000400000-0x00000000004F6000-memory.dmp
-
Size
984KB
-
MD5
805ef21cd8af97f370b522a93e3bba6d
-
SHA1
d0b89c8a59bad6cf1dbc82696f8f4e2962bcd2ac
-
SHA256
7646df9957abfd7afbf7d8ae0f3e646662dbb9ee6139b0df497af46828b42eee
-
SHA512
db46e1d4718583fddb78ccdcd488c41f3f4b268370e895b93b87eab53eba62cc40f7983f01ff6e5e55067e1595e19f21a6064cefc2c8958e492790358c914725
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqMIzmdiU1dNQkJ0eAoCUxswB:nSHIG6mQwGmfOQd8YhY0/EFUGV6+B7
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/a14/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2236-2-0x0000000000400000-0x00000000004F6000-memory.dmp
Headers
Sections