lokibot

General

Target

f761ec2eab1997b820c55529664277bd0e50430bffe9e52828eb0cc47052ef40
Size

99KB
Sample

220521-nye3bshdfl
MD5

5dda7f5ceca9e02692a3220c5af2fdca
SHA1

152e550077310c0c29bfb7b3c13b0601fcfc16e8
SHA256

f761ec2eab1997b820c55529664277bd0e50430bffe9e52828eb0cc47052ef40
SHA512

a131e6ca4c52229cab07e366834fb9b3b1f2c44b2fa407d96b2b233e44ed3d4821d8b4257402ee7a98828688b701441f197783e89c34ab2e838bb497172fa08d

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://195.69.140.147/.op/cr.php/rBvEb52mPBnqh

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  Shipment Document BL,INV and Packing List Attached.exe
- Size
  
  269KB
- MD5
  
  6b867daf3833eed6d3b0f937d5c2deb8
- SHA1
  
  eda3c03511a75e8aeb6ba9631c58ca664139e0b7
- SHA256
  
  cbdceb86c103f8263dd8e128cd5f2153b2698f8a7014377bc60d1a4f7c8c5fd9
- SHA512
  
  35bfb81aefef82e0840fbfb41844cec394b3796ec92802ba001d720db6acb4bd99cef1c938e36ae3cea632b78949fe3b8f97278aa36f4fe29740f2f9c12fb523
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2