General
-
Target
2460-27-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
8ac54d0a0b4983b3f9fb54d4d03843c7
-
SHA1
859df997934bc71f4337197d70e6fd0ec3c5edfe
-
SHA256
696c755f5a3139af7494cd30d6a2255b57812a3bc062583135bcddd770d7811c
-
SHA512
967cfb3fd2f7e203c6dbd113fab6b230c5966b70eafda642ae545cab3af0b6e32bc7dec0911bb38a02841d9c92f39ae45033f37fd561ff8d52a98a80ac0e7d51
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
https://sempersim.su/c16/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2460-27-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections