General
-
Target
2728-12-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
9762991499a4c0837c29943a5dfc14df
-
SHA1
f8c3e45371b9fb3ffda6ead3eb1d92ed2c10e1a3
-
SHA256
719a3ca66d6ecd9b5b1d95156acc1306a782c99c99e6b800977c502b9495eb7d
-
SHA512
89a0ae864fef89de055711fd4a9e44e923ec4a631662c9bc2bd4d99d5136e234e36eabef8fb7721d9f4ce6c44a4e3086fc4fdee99d53aab9115bd24693caf355
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqdIzmd:nSHIG6mQwGmfOQd8YhY0/EsUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://solutviewmen.viewdns.net/bdifygidj/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2728-12-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections