General

  • Target

    932-55-0x0000000000240000-0x000000000025B000-memory.dmp

  • Size

    108KB

  • MD5

    2f5f924206b51c173341617620630921

  • SHA1

    e349eb296293e1f3c3693fb7447ff9b8af660d38

  • SHA256

    1ae881e7c00092e0bcb381047bac7a4a1aa94b8418e640c75532ff0912e8f638

  • SHA512

    2d428dd219f69a04933fb1c339c94e0ff69b628a701acb8056ec6fe5c56bd27248b02cd93e490dbab454dac4bc470af407fdc8e750c50bcda1cbe7230c29088a

  • SSDEEP

    1536:wlqD3zvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:9DMSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10

Malware Config

Extracted

Family

lokibot

C2

http://194.180.48.58/ok/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Signatures

Files

  • 932-55-0x0000000000240000-0x000000000025B000-memory.dmp