lokibot

General

Target
295abbfa189e8bf61ab258e3857b1055cbefc78cca1cb2bba34eb7315811d816
Size 728KB
Sample220615-r2gxwaebb7
SHA256 295abbfa189e8bf61ab258e3857b1055cbefc78cca1cb2bba34eb7315811d816
MD5 6544c4fe49a868ca0305f4fedf230bcf
SHA1 1df3bc69ae80054181d32e02c6399b6e6064f31b
SHA512 336b2512e57a9d634c95c3ba7d12ce5675036b146dee330e8a45950ca4c89a545f4fdae270f16a8307ded70f19dd931676827493d57703b32b4707b2b6df0894
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://onlygoood.com/ae1/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  295abbfa189e8bf61ab258e3857b1055cbefc78cca1cb2bba34eb7315811d816
- Size 728KB
- SHA256 295abbfa189e8bf61ab258e3857b1055cbefc78cca1cb2bba34eb7315811d816
- MD5 6544c4fe49a868ca0305f4fedf230bcf
- SHA1 1df3bc69ae80054181d32e02c6399b6e6064f31b
- SHA512 336b2512e57a9d634c95c3ba7d12ce5675036b146dee330e8a45950ca4c89a545f4fdae270f16a8307ded70f19dd931676827493d57703b32b4707b2b6df0894
- MD5 SHA1 SHA512
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2