General
-
Target
2064-53-0x00000000000C0000-0x0000000000162000-memory.dmp
-
Size
648KB
-
MD5
6d8c3030548e2f58740b4ee114a89490
-
SHA1
25405fece11e757bbb91e2d377a6701b20d380cd
-
SHA256
d204a3b7115abfc7fbb67df70a3297148a583bf90885235645c905b606623f16
-
SHA512
0e268708c30e48554fbe1df2eed22ef62e3a7f0afe002d82233b2103faed7c21783d07b650a260533404cd1d065a3e5d555a3a36a5ad998c9a75730f7a7b63b6
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/c12/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2064-53-0x00000000000C0000-0x0000000000162000-memory.dmp
Headers
Sections