lokibot

Resubmissions

10/10/2022, 15:26

221010-svaewscegn10

10/10/2022, 15:11

221010-skk4msccf610

Sharing

Copy URL Twitter E-mail

General

Target
e5b7ea9ec17c2e44cf3ab53050f8bfad.exe
Size 184KB
Sample221010-skk4msccf6
SHA256 c5dafabab462b9726bc0dc16cc523fa3432c40d0698c62db0c1dd5d5ff097fee
MD5 e5b7ea9ec17c2e44cf3ab53050f8bfad
SHA1 703fd35dc0a7c7d04f8db7ec1697a3c592489a8a
SHA512 5fae9adf628b3812f89ae6e2479ed1b10f26940be955e944bbb27b7860b4150dfc45b2d7f0015d915f875fdb9ce2f9a52ed105a1c3d454499dbffcf510255845
SSDEEP 3072:l1NjcVVnLpPunbOnKfquOxxtIZtYPyHbQzwbeWpWEM2lvneXafPlDls1y3S5K/mj:HNeZmt4xtRGbewbJWE5neqNcy3S4MT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  e5b7ea9ec17c2e44cf3ab53050f8bfad.exe
- Size 184KB
- SHA256 c5dafabab462b9726bc0dc16cc523fa3432c40d0698c62db0c1dd5d5ff097fee
- MD5 e5b7ea9ec17c2e44cf3ab53050f8bfad
- SHA1 703fd35dc0a7c7d04f8db7ec1697a3c592489a8a
- SHA512 5fae9adf628b3812f89ae6e2479ed1b10f26940be955e944bbb27b7860b4150dfc45b2d7f0015d915f875fdb9ce2f9a52ed105a1c3d454499dbffcf510255845
- SSDEEP 3072:l1NjcVVnLpPunbOnKfquOxxtIZtYPyHbQzwbeWpWEM2lvneXafPlDls1y3S5K/mj:HNeZmt4xtRGbewbJWE5neqNcy3S4MT
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Email Collection

T1114

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2