General
-
Target
4244-21-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
faee2f541f659d95c5ca16bd4c292b35
-
SHA1
5918bee5a7e7c427b6308c49cd58bfbb93cab7b4
-
SHA256
bc98da8d9ae8f85b8a7044ad59b640c65fe63251d34b9b4df4ab3690bff82953
-
SHA512
1401d1812625bdac9cad5eea9b9f2acd32fc6e6f69f882fcf83f9d2d910d016ae4605f9787068e3537a5720a0cc2bca8a11a3266a6da895691c070550c4c8af5
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://acutbank.com/ddddd/lokinew/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4244-21-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections