lokibot | 975bfa103383a4a8ee097bdaaefebba41244a41ac68a862603d1de36385f709c | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
[email protected]
Size 834KB
Sample210126-7wchtq2946
SHA256 975bfa103383a4a8ee097bdaaefebba41244a41ac68a862603d1de36385f709c
MD5 08b8c50f3ca0402a66ad4b76ed784a9e
SHA1 0d72ca48fd93abd4c1d38aca6a355c28d40576fb
SHA512 715e284b0fd560e53d0060809b2ca32136c5e1735d7c038b2be24ed2f3aa890684aaee482426ade365200a73902dbf1218394478575309986a3fe19299a3358b
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://wagisz.com/kin/kin1/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  [email protected]
- Size 834KB
- SHA256 975bfa103383a4a8ee097bdaaefebba41244a41ac68a862603d1de36385f709c
- MD5 08b8c50f3ca0402a66ad4b76ed784a9e
- SHA1 0d72ca48fd93abd4c1d38aca6a355c28d40576fb
- SHA512 715e284b0fd560e53d0060809b2ca32136c5e1735d7c038b2be24ed2f3aa890684aaee482426ade365200a73902dbf1218394478575309986a3fe19299a3358b
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan