General
-
Target
2104-989-0x0000000000400000-0x0000000001462000-memory.dmp
-
Size
16.4MB
-
MD5
92eaafb411aa956e507efccf3571ec33
-
SHA1
12103aff242b673b31db18b7580cc176cd91bd5b
-
SHA256
c8b399132e66cdcf6adac66edef0b9ffa64f3d7f67676974f8f2ebb0727da83d
-
SHA512
8b6e4aed8f76a018952da78ff85794be31de01a6e122e259efd9ae8c127eb34e64f57f9aa99cbac20c40f5f5812609b0ba97a804403de49b6a85eb6db7b7f76c
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqwIzmd:nSHIG6mQwGmfOQd8YhY0/ElUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://ransomproducts.top/cj1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2104-989-0x0000000000400000-0x0000000001462000-memory.dmp
Headers
Sections