General

  • Target

    936-73-0x00000000003C0000-0x00000000003DB000-memory.dmp

  • Size

    108KB

  • MD5

    5eb6b46c3889ec12312638399dba0446

  • SHA1

    37c75621482c1af0b68d891e8bc10f7665210c77

  • SHA256

    e9cc298e9e29702af8ed43ed9c4f356cce5c70635744866d5cd387b45a991b3b

  • SHA512

    2164b017e74d42d77b6bec729facbfc4c479442f8063bc0a72bd87406ebad25095c06dc848f8686d79b09e357d1453c1bceeb76f7c24a22177ad82511ed79d91

  • SSDEEP

    1536:wl8D3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:bDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/mancho/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 936-73-0x00000000003C0000-0x00000000003DB000-memory.dmp