General

  • Target

    5624-24-0x0000000000400000-0x000000000042B000-memory.dmp

  • Size

    172KB

  • MD5

    19b990a8e64a6c4d1a82099d15d3caf8

  • SHA1

    503612f4667f8fce378eafca31f31a6a412ecd66

  • SHA256

    565e22ff692f9304332c84c51f7570c0f4bc16b7e88571999301deeff747b54c

  • SHA512

    76d4d7dbb67f3cc2e1af2e18846f04870b3f75c136bc9c004250210af83219b3e81902c11b36b93fb611770f238d5096d20ae55921ea3e5eca3fa4d2f2d81f7c

  • SSDEEP

    1536:SrvhQ428I4Y+62KrAANTAT2EeRFEvXPCg8nWrj+B0Q2gqsGcBpWUF996:Srvh2d4Y+0AAinSoXPN8nWCPtXpWUFe

Score
10/10

Malware Config

Extracted

Family

mylobot

C2

op17.ru:6006

eakalra.ru:1281

zgclgdb.ru:8518

hpifnad.ru:3721

lbjcwix.ru:8326

rykacfb.ru:8483

benkofx.ru:3333

fpzskbc.ru:9364

ouxtjzd.ru:8658

schwpxp.ru:2956

pspkgya.ru:2675

lmlwtdm.ru:2768

rzwnsph.ru:5898

awtiwzk.ru:9816

pzljenb.ru:3486

yhjtpyf.ru:3565

ogkbsoq.ru:2553

rjngcbj.ru:5655

jlfeopz.ru:4698

wqcruiz.ru:2165

Signatures

  • Mylobot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5624-24-0x0000000000400000-0x000000000042B000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections