General
-
Target
1240-55-0x00000000003A0000-0x00000000003BB000-memory.dmp
-
Size
108KB
-
MD5
176906c5aceaeabae965bee217c2538e
-
SHA1
38aad7c9550e4b39651c9761e97d67550705fa65
-
SHA256
e51614d6d610e75c9e49f581d01122cc0536fb6ef37fa645bf6cb0cd15b59436
-
SHA512
599588e8effedbe41e78db5c32343c53ea9659ac617a956416acb3b950c38159926e9402d472e32f7f8976af02dcb787cb233c2be4e9880118732d470a87a5bc
-
SSDEEP
1536:wlsD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:PDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/ha19/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
1240-55-0x00000000003A0000-0x00000000003BB000-memory.dmp