lokibot | 828e3b1f2d646f988ba81f30ac47bda1e082a4a63735e1a87cb4e44db0514cdc | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Escanear copia001.pdf.exe
Size 779KB
Sample210906-xzcs2abdb8
SHA256 828e3b1f2d646f988ba81f30ac47bda1e082a4a63735e1a87cb4e44db0514cdc
MD5 f60ee0d806af50b985421504b2a6087f
SHA1 87a0de1687805fc8b8ee673a16844c2a45d2b738
SHA512 f652a6cdf5b547ef9f18780a07aa363736a495f27a887572fc47a53961bfa719086788baa70820f797a9544b7700c690356c2ccdb3ee74785222f88306f77e02
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://semkil.xyz/ee/cc/xx.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  Escanear copia001.pdf.exe
- Size 779KB
- SHA256 828e3b1f2d646f988ba81f30ac47bda1e082a4a63735e1a87cb4e44db0514cdc
- MD5 f60ee0d806af50b985421504b2a6087f
- SHA1 87a0de1687805fc8b8ee673a16844c2a45d2b738
- SHA512 f652a6cdf5b547ef9f18780a07aa363736a495f27a887572fc47a53961bfa719086788baa70820f797a9544b7700c690356c2ccdb3ee74785222f88306f77e02
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan