General
-
Target
892-55-0x0000000000220000-0x000000000023B000-memory.dmp
-
Size
108KB
-
MD5
6f5f56bd86cd6b37453866b93686d29f
-
SHA1
86cb77b9b42de1ee1225ba1825ab3a4a6417ce03
-
SHA256
ed875a935539524e2b6385fbc5f0015cfae2a2594bf146726e23338cf3cfa3b5
-
SHA512
475e933e520e4c8e2259f425242b012d341449bb5d56ba729c0912a3ef12799c7f9e3618594494ef2aafe2110519f625b829de59f956b9455ce050b9f1b9d194
-
SSDEEP
1536:wlGD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:1DMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://185.246.220.85/fresh/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
892-55-0x0000000000220000-0x000000000023B000-memory.dmp