lokibot | 8ab0599e3f141523358e5b60ef3cd9a2fb1fdbde52cb693e675a9004a25ff007 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Nuevo orden de compra AIGNEP033121.PDF.exe
Size 204KB
Sample210331-pg5ydkdynj
SHA256 8ab0599e3f141523358e5b60ef3cd9a2fb1fdbde52cb693e675a9004a25ff007
MD5 e15d64b7871cd78830e384958ed18196
SHA1 6f321defc01a41357e0b526905674abc2d8bd69a
SHA512 a25b28f8e189a4a2825e13c0577a06576e798448c31696c03ab7add904dd95bda57db37e1624ce6ceb9dda16c8c57e57727d57e2bdee174dcedd7bf2187e87fb
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://amrp.tw/smank/gate.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  Nuevo orden de compra AIGNEP033121.PDF.exe
- Size 204KB
- SHA256 8ab0599e3f141523358e5b60ef3cd9a2fb1fdbde52cb693e675a9004a25ff007
- MD5 e15d64b7871cd78830e384958ed18196
- SHA1 6f321defc01a41357e0b526905674abc2d8bd69a
- SHA512 a25b28f8e189a4a2825e13c0577a06576e798448c31696c03ab7add904dd95bda57db37e1624ce6ceb9dda16c8c57e57727d57e2bdee174dcedd7bf2187e87fb
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan