lokibot | 917a18876b441d7d29a38eabd103fcb803cc73e8bd1307f2d36cf9738d6e68e0 | Triage

Resubmissions

18-01-2021 12:17

210118-m3kprw4xg6 10

Sharing

General

Target

Lokibot.bin
Size

104KB
Sample

210118-m3kprw4xg6
MD5

d0e03def597d852dcb93458cfa596843
SHA1

6f907f8f731f84cdaf19f07abe2b02bd3975ebfd
SHA256

917a18876b441d7d29a38eabd103fcb803cc73e8bd1307f2d36cf9738d6e68e0
SHA512

8868b2ec512626b6d5a1e15453c66dea70c83f382c85be6281cd722b03cac8a4ce8248f7eaf08424267e314c9237842c84db2a4349467fe45d0c380166d4e278

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://51.195.53.221/p.php/Ezw3qu5lmvRXE

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  Lokibot.bin
- Size
  
  104KB
- MD5
  
  d0e03def597d852dcb93458cfa596843
- SHA1
  
  6f907f8f731f84cdaf19f07abe2b02bd3975ebfd
- SHA256
  
  917a18876b441d7d29a38eabd103fcb803cc73e8bd1307f2d36cf9738d6e68e0
- SHA512
  
  8868b2ec512626b6d5a1e15453c66dea70c83f382c85be6281cd722b03cac8a4ce8248f7eaf08424267e314c9237842c84db2a4349467fe45d0c380166d4e278
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan