lokibot | a6769bb52e8d65f4d175984ee03cc5a7fe82ed2c3b84580c30eaf50ba7ad0740 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
a6769bb52e8d65f4d175984ee03cc5a7fe82ed2c3b84580c30eaf50ba7ad0740
Size 704KB
Sample201110-j6t8k5mlx6
SHA256 a6769bb52e8d65f4d175984ee03cc5a7fe82ed2c3b84580c30eaf50ba7ad0740
MD5 bd585a22a1ef227bf0180c56aa71ef73
SHA1 756c8f99b79f67c81034f5f436ade300d5e4bef6
SHA512 70f76def731b5acc452c044e48c81e27997b91eb1056788ee452f55a0aa67c9c25cd7bb83867e631f8e47b9fb68054b6334344c81a44d5b91bf67814421bcdbf
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://venitronics.com/oo/Panel/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  a6769bb52e8d65f4d175984ee03cc5a7fe82ed2c3b84580c30eaf50ba7ad0740
- Size 704KB
- SHA256 a6769bb52e8d65f4d175984ee03cc5a7fe82ed2c3b84580c30eaf50ba7ad0740
- MD5 bd585a22a1ef227bf0180c56aa71ef73
- SHA1 756c8f99b79f67c81034f5f436ade300d5e4bef6
- SHA512 70f76def731b5acc452c044e48c81e27997b91eb1056788ee452f55a0aa67c9c25cd7bb83867e631f8e47b9fb68054b6334344c81a44d5b91bf67814421bcdbf
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan