General
-
Target
2936-40-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
b872616f936af07df969e51a128b392d
-
SHA1
76702cbc8790ee62e84a0f1f0f9389758312eb43
-
SHA256
c90addedb29ae6cf1980f0f6746d659f4c3fa623b3740adad5bb98b4d862ed21
-
SHA512
6a2ae910050ad142600e949c5ef5b4121ac0201bcd3bac2a05112a09653c723732fca14df5166420ef801a4df76d67d00a032291ac2dc4e7d86060b806d7b77a
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:nSHIG6mQwGmfOQd8YhY0/EOUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://kelly.spencerstuartllc.top/_errorpages/kelly/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2936-40-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections