General
-
Target
1192-27-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
56df92972225c80da4442966a0cf6c92
-
SHA1
694964c4bc140e693c4c5a18c1fbd024f17e6570
-
SHA256
47bc4adabb0fe8dcf8d6f08720371a632cf58513dc2b2e421e431fc3ee32781a
-
SHA512
5e7ace18ae3ca70e34beaee328b6af4827d991eb21a0f34a54d924e8f8867c2f9a8f0180191c3079ae558c8324678f1e49e99dddf0b7611672a1f849963a9ce1
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://94.156.66.169:5888/shtfgdfgd/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1192-27-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections