lokibot | 4ab7cc42e3e3d2024d48d9e07a6f554a11a49a2ca1f47bc5e8115c0fbb303190 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
4ab7cc42e3e3d2024d48d9e07a6f554a11a49a2ca1f47bc5e8115c0fbb303190
Size 104KB
Sample201024-bx8warjf9a
SHA256 4ab7cc42e3e3d2024d48d9e07a6f554a11a49a2ca1f47bc5e8115c0fbb303190
MD5 6b93b7d13d086f32e5bea46d15606418
SHA1 b0d2437dc90723f09947cbb56b4efd4b57c83730
SHA512 01be17de2d23548a931c56c43dca8ce6737a2f90a23999df953025253f724f39f27e885a2e0afaa912f030c5289a64fe18e7bb8a58f5cc48666b1253a9782e00
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://mecharnise.ir/eb2/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  4ab7cc42e3e3d2024d48d9e07a6f554a11a49a2ca1f47bc5e8115c0fbb303190
- Size 104KB
- SHA256 4ab7cc42e3e3d2024d48d9e07a6f554a11a49a2ca1f47bc5e8115c0fbb303190
- MD5 6b93b7d13d086f32e5bea46d15606418
- SHA1 b0d2437dc90723f09947cbb56b4efd4b57c83730
- SHA512 01be17de2d23548a931c56c43dca8ce6737a2f90a23999df953025253f724f39f27e885a2e0afaa912f030c5289a64fe18e7bb8a58f5cc48666b1253a9782e00
- MD5 SHA1 SHA512
Score

10^/10

trojan spyware stealer lokibot
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

trojanspywarestealerlokibot

behavioral2

trojanspywarestealerlokibot