lokibot | b46b5b42ac74dfcff2d6dcd0ea1492c7065428ced5276fff88bbb06415315bef | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
b2956955caf50380360313a33a6fb339.exe
Size 1.2MB
Sample201215-6ejed4ny7n
SHA256 b46b5b42ac74dfcff2d6dcd0ea1492c7065428ced5276fff88bbb06415315bef
MD5 b2956955caf50380360313a33a6fb339
SHA1 7db33e9f19fa54dbf5962167962c03b1002277e6
SHA512 a7edc61a6addbbcdf64d02fbd7dad93e3f616748e7b19dbb827d95649db5e3b4483ce66534875a1ff29c40a6e17e3b0e9627ee1e1bff473ddfef72685b4e7a45
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://begadi.ga/chud/gate.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  b2956955caf50380360313a33a6fb339.exe
- Size 1.2MB
- SHA256 b46b5b42ac74dfcff2d6dcd0ea1492c7065428ced5276fff88bbb06415315bef
- MD5 b2956955caf50380360313a33a6fb339
- SHA1 7db33e9f19fa54dbf5962167962c03b1002277e6
- SHA512 a7edc61a6addbbcdf64d02fbd7dad93e3f616748e7b19dbb827d95649db5e3b4483ce66534875a1ff29c40a6e17e3b0e9627ee1e1bff473ddfef72685b4e7a45
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan