lokibot

General

Target
4bba4b8bb98ab01e96e0cf4c804a8d8a.exe
Size 562KB
Sample201006-2qdgnjj9cj
SHA256 d2260cf4bc6a1c1c042af5caa0c0d76c4efca389588ddef8a57108ca3f1c41cb
MD5 4bba4b8bb98ab01e96e0cf4c804a8d8a
SHA1 2f3ce4417d8daff071e34dfcbd60ed3d7efae358
SHA512 277e7cbe586c91847e4b5ce7dd67a95d40d7cb9f7cfb69d9df7c5f0e281c13b5e3e37b500acf8fc6fbb7c53a72524caa9ecf76ca3962c68e5bc1f0e4e35cf322
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://104.223.143.132/XUXprite/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  4bba4b8bb98ab01e96e0cf4c804a8d8a.exe
- Size 562KB
- SHA256 d2260cf4bc6a1c1c042af5caa0c0d76c4efca389588ddef8a57108ca3f1c41cb
- MD5 4bba4b8bb98ab01e96e0cf4c804a8d8a
- SHA1 2f3ce4417d8daff071e34dfcbd60ed3d7efae358
- SHA512 277e7cbe586c91847e4b5ce7dd67a95d40d7cb9f7cfb69d9df7c5f0e281c13b5e3e37b500acf8fc6fbb7c53a72524caa9ecf76ca3962c68e5bc1f0e4e35cf322
- MD5 SHA1 SHA512
Score

10^/10

spyware trojan stealer lokibot modiloader
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- ModiLoader, DBatLoader
  ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
  trojan modiloader
- ModiLoader Second Stage
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

1

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

ModiLoader, DBatLoader

ModiLoader Second Stage

Reads user/profile data of web browsers

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2