lokibot | dae4a92ce18215d3078e64a2ae56f091ffbf4946007f44897aaa834fd4348da4 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
t4joF5EztNVS4H9.exe
Size 917KB
Sample210702-32ab4d17rn
SHA256 dae4a92ce18215d3078e64a2ae56f091ffbf4946007f44897aaa834fd4348da4
MD5 504ad0762a5e404ff3becdb945c3ff80
SHA1 350cc2e19793c1c934e3e3479c5d803e14c4365a
SHA512 6406496856eaa1c725c1329017f3d1ec8627ec5bfa39084d4813b31f5fb443f27084240fd51335571557ad0f25bbbe985693214684cf932cfb565d5308a57dc5
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://185.110.190.5/gugufdre.php/L6J4kh5OOGtJ5
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  t4joF5EztNVS4H9.exe
- Size 917KB
- SHA256 dae4a92ce18215d3078e64a2ae56f091ffbf4946007f44897aaa834fd4348da4
- MD5 504ad0762a5e404ff3becdb945c3ff80
- SHA1 350cc2e19793c1c934e3e3479c5d803e14c4365a
- SHA512 6406496856eaa1c725c1329017f3d1ec8627ec5bfa39084d4813b31f5fb443f27084240fd51335571557ad0f25bbbe985693214684cf932cfb565d5308a57dc5
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan