General

  • Target

    1300-55-0x0000000000220000-0x000000000023B000-memory.dmp

  • Size

    108KB

  • MD5

    3ef24baefd03dc39dfd084bd48dc3c41

  • SHA1

    e70aae8881c8b8c6b8b9bff57da7c77282f2ea7a

  • SHA256

    c43627114daf3207702e88b7ab15c3cc981b813bd994d8432678d8d594a5ec18

  • SHA512

    c9940bc8ad9c99602ed0ba31dab4adff1e2249e5c3ae4f66f6bccb31861d863399d641660b6d8dd1ce2302dd93ea64f19afd8631c33da70bc2c7d4cd91b7a7c1

  • SSDEEP

    1536:wlID3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:DDMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/chang1/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 1300-55-0x0000000000220000-0x000000000023B000-memory.dmp