General
-
Target
2548-31-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
17799ef4f8aab969e3c6c07ba2abff8c
-
SHA1
f3ae19a5818f5983b6f51648047aa5ce6ab36806
-
SHA256
3e5d5363f75249134e742a680573b2fafafad6952514088bab5cab0a0a9ceb6c
-
SHA512
bd03a12ba4e9218b6f7d131c42d415e19c17be1413593cf6ac6638345d5f5c9cbc2e6c3a86995f57289cc5e8629c5a27a7be3ed5046c4e4404a63a16a9ba1cdf
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqHIzmd:nSHIG6mQwGmfOQd8YhY0/E6UG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://mtuogioanis.com/mad/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2548-31-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections