General
-
Target
2164-19-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
dca970937d0161a983ede2b0f1c58f47
-
SHA1
33b1935547ad74f44b0b340a060adec72266d02f
-
SHA256
dfd50a6c79b2867645ae8c3f8400c255092182b8f2012f26f2ebc647c1eab1c4
-
SHA512
f360e83632e0531da48f949e2657eb1f256253f35a5d5b0b772d8a5a1ff0676bc94db79c6405230baa483a47b2d13f5fc52b39e7a3e01838186e6c2bff2870d9
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://touxzw.ir/alpha2/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2164-19-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections