General
-
Target
2868-31-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
1d51dc650003278cd2f280dfc821c63b
-
SHA1
f982f62294f478623c21a20b07b4ffeec1e1b3a7
-
SHA256
4a49b4c6d3a9c981e824c3dc24f4882fb004a3cbd4643adf662391b4b3bf4a88
-
SHA512
47139f1c51481248495278b1080241327ca643916903c07ccb03ea6c7ff4480ca8988ccd8c733f9d1ba3b0847fbf9cbdf3197d24a149fd5d2b6c438e6b03e2ad
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/Eq+Izmd:nSHIG6mQwGmfOQd8YhY0/EfUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://merckllc.top/kin/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2868-31-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections