General
-
Target
932-55-0x0000000000240000-0x000000000025B000-memory.dmp
-
Size
108KB
-
MD5
2f5f924206b51c173341617620630921
-
SHA1
e349eb296293e1f3c3693fb7447ff9b8af660d38
-
SHA256
1ae881e7c00092e0bcb381047bac7a4a1aa94b8418e640c75532ff0912e8f638
-
SHA512
2d428dd219f69a04933fb1c339c94e0ff69b628a701acb8056ec6fe5c56bd27248b02cd93e490dbab454dac4bc470af407fdc8e750c50bcda1cbe7230c29088a
-
SSDEEP
1536:wlqD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:9DMSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://194.180.48.58/ok/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
Files
-
932-55-0x0000000000240000-0x000000000025B000-memory.dmp