General
-
Target
936-73-0x00000000003C0000-0x00000000003DB000-memory.dmp
-
Size
108KB
-
MD5
5eb6b46c3889ec12312638399dba0446
-
SHA1
37c75621482c1af0b68d891e8bc10f7665210c77
-
SHA256
e9cc298e9e29702af8ed43ed9c4f356cce5c70635744866d5cd387b45a991b3b
-
SHA512
2164b017e74d42d77b6bec729facbfc4c479442f8063bc0a72bd87406ebad25095c06dc848f8686d79b09e357d1453c1bceeb76f7c24a22177ad82511ed79d91
-
SSDEEP
1536:wl8D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:bDMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://171.22.30.164/mancho/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
936-73-0x00000000003C0000-0x00000000003DB000-memory.dmp