General

  • Target

    1240-55-0x00000000003A0000-0x00000000003BB000-memory.dmp

  • Size

    108KB

  • MD5

    176906c5aceaeabae965bee217c2538e

  • SHA1

    38aad7c9550e4b39651c9761e97d67550705fa65

  • SHA256

    e51614d6d610e75c9e49f581d01122cc0536fb6ef37fa645bf6cb0cd15b59436

  • SHA512

    599588e8effedbe41e78db5c32343c53ea9659ac617a956416acb3b950c38159926e9402d472e32f7f8976af02dcb787cb233c2be4e9880118732d470a87a5bc

  • SSDEEP

    1536:wlsD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:PDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

https://sempersim.su/ha19/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1240-55-0x00000000003A0000-0x00000000003BB000-memory.dmp