lokibot | ce6f3613198f224b2d264ba30dbd94bf2c6404f7299e6a09959f246d5e723a7a | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Reversed Contract 2020_pdf.exe
Size 831KB
Sample201209-565cry6yce
SHA256 ce6f3613198f224b2d264ba30dbd94bf2c6404f7299e6a09959f246d5e723a7a
MD5 165f1e5ee211702d806ae4909e800a7d
SHA1 c0e266b72a09d4b1fa875207da8dd203cb4f827d
SHA512 3843fed11af8c2542c340330c82598eb7d02904ffb09845053524fb7c994fdac2c02f72b03c46fd8fbdcf8e292f18f639ee582b705908155aca5d7c285c5a875
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

https://tuandat-vn.com/verify/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  Reversed Contract 2020_pdf.exe
- Size 831KB
- SHA256 ce6f3613198f224b2d264ba30dbd94bf2c6404f7299e6a09959f246d5e723a7a
- MD5 165f1e5ee211702d806ae4909e800a7d
- SHA1 c0e266b72a09d4b1fa875207da8dd203cb4f827d
- SHA512 3843fed11af8c2542c340330c82598eb7d02904ffb09845053524fb7c994fdac2c02f72b03c46fd8fbdcf8e292f18f639ee582b705908155aca5d7c285c5a875
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

lokibotspywarestealertrojan