General
-
Target
2388-17-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
a6f4e8ddd4267a20d489119d091a9125
-
SHA1
eda53ca1074396fadbfbb5619520a0fd1f9936f2
-
SHA256
b05fe796fb0e1676aa9c037b25d6dca136b334a96b812d9e291b0fb17a4d645a
-
SHA512
62263e8ec2cde2e94f249bca25441e4cc76a020e7aafbf8da419bd470ce6717fd04d1bf1ffc51fc72aa31f6008c7a31e6000284ab6bcd6a93c12574af24c204a
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://146.190.157.174/f5wBqfdsw44C35W
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2388-17-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections