General
-
Target
1720-12-0x0000000000400000-0x00000000004A2000-memory.dmp
-
Size
648KB
-
MD5
7f0bfdb1ddcc529d5864aa372ea1dca7
-
SHA1
1151545e61c7a980f7d50ba7c966635770858953
-
SHA256
55dee46121d3f5c8eb245d0dfcf590a07df925e60df1657dbe030b308d3f6626
-
SHA512
3ec6b84b47bb68e302c4263c5efb0ae6ccdf9d6513a3cafcea949c88a310c47ef14bbdf7c1bd92e1442e6ff491a9bc0177d97e7a8004cfe25f1b81080c504811
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score
10/10
Malware Config
Extracted
Family
lokibot
C2
http://touxzw.ir/sccc/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Signatures
-
Lokibot family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1720-12-0x0000000000400000-0x00000000004A2000-memory.dmp
Headers
Sections