lokibot | d2f99cc9154356e6611a695336854cebafdfe613f20f5cd828a25ee0289126e4 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
d990356f9c7e2530a47bf3c1044bbae1.exe
Size 769KB
Sample210415-d537a86al6
SHA256 d2f99cc9154356e6611a695336854cebafdfe613f20f5cd828a25ee0289126e4
MD5 d990356f9c7e2530a47bf3c1044bbae1
SHA1 0ac368e656b8a6148f091cf40f6c01c5e4d54db4
SHA512 d070860aa766303b1e16a44201e60bec793f6556b7ef91ecc0d77c3278d704c7728d2588b0c1a2a39964a6fd4094e20d2bcff04af99e5699705b4b27e67b96d1
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://51.195.53.221/p.php/NsLsWZMAWJWW1
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  d990356f9c7e2530a47bf3c1044bbae1.exe
- Size 769KB
- SHA256 d2f99cc9154356e6611a695336854cebafdfe613f20f5cd828a25ee0289126e4
- MD5 d990356f9c7e2530a47bf3c1044bbae1
- SHA1 0ac368e656b8a6148f091cf40f6c01c5e4d54db4
- SHA512 d070860aa766303b1e16a44201e60bec793f6556b7ef91ecc0d77c3278d704c7728d2588b0c1a2a39964a6fd4094e20d2bcff04af99e5699705b4b27e67b96d1
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan