lokibot | c2f19d09b75e7e3a3fc37523b1b65b63850819c18882947359eacd8ef9c833f3 | Triage

Sharing

General

Target

c2f19d09b75e7e3a3fc37523b1b65b63850819c18882947359eacd8ef9c833f3.exe
Size

702KB
Sample

210623-cj12mxnxb6
MD5

385565f333a4e01d574a70da283cb484
SHA1

c87fb9da1a64badef26e38d517fca5309b5f9627
SHA256

c2f19d09b75e7e3a3fc37523b1b65b63850819c18882947359eacd8ef9c833f3
SHA512

79b36ff30f8b3fa747a9c828675c85e612611b2ca8cba23889cdd389fba2c716af39ee7cc0a6446727996ab749e0115dab8170229abc04d963cfbff06321ce2f

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://192.119.111.43/dx/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  c2f19d09b75e7e3a3fc37523b1b65b63850819c18882947359eacd8ef9c833f3.exe
- Size
  
  702KB
- MD5
  
  385565f333a4e01d574a70da283cb484
- SHA1
  
  c87fb9da1a64badef26e38d517fca5309b5f9627
- SHA256
  
  c2f19d09b75e7e3a3fc37523b1b65b63850819c18882947359eacd8ef9c833f3
- SHA512
  
  79b36ff30f8b3fa747a9c828675c85e612611b2ca8cba23889cdd389fba2c716af39ee7cc0a6446727996ab749e0115dab8170229abc04d963cfbff06321ce2f
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan