lokibot | 42dff3b3fb6effeeb3a6c4ff8049cc698689d3a2bcb4544931593374d9b43501 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Detalles del banco.pdf.exe
Size 758KB
Sample210825-24f2vem18n
SHA256 42dff3b3fb6effeeb3a6c4ff8049cc698689d3a2bcb4544931593374d9b43501
MD5 60ad1a2397b679861b324460d96bba56
SHA1 36d96fd1c92497e227d21916717e083b757c4174
SHA512 fa96630ea3acbb3be666ce75a4f898ebf26dbc80ea6e9c4892514c52f9487e5a1e35260570e7dd4a75da4d1a8a53addc38222c3e477de5a41e3af8a141ea33d0
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://semkil.xyz/ee/cc/xx.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  Detalles del banco.pdf.exe
- Size 758KB
- SHA256 42dff3b3fb6effeeb3a6c4ff8049cc698689d3a2bcb4544931593374d9b43501
- MD5 60ad1a2397b679861b324460d96bba56
- SHA1 36d96fd1c92497e227d21916717e083b757c4174
- SHA512 fa96630ea3acbb3be666ce75a4f898ebf26dbc80ea6e9c4892514c52f9487e5a1e35260570e7dd4a75da4d1a8a53addc38222c3e477de5a41e3af8a141ea33d0
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan