General
-
Target
2916-18-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
39685d31bfe52f2f8c3ba7bc029f783e
-
SHA1
358d266c7a6c35a333ea1b4522631abca0857a41
-
SHA256
7f9581c0b810a4261b6a91a2ccfd2411651c49267c5caf29ca1a7ad47da4ab37
-
SHA512
eaef87d940d5e2f8e6eaf841a51956053880b2c21df6ee6d06ef8938637f185be052d799136d0bbcd64b4a5768ab4110e87457e9af19c6929f43186013b5e55a
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqKIzmd:nSHIG6mQwGmfOQd8YhY0/ELUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://rocheholding.top/evie3/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2916-18-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections