lokibot

General

Target
1d9e0d5628112d7ad65882780935de6a.exe
Size 965KB
Sample221115-smygraac8t
SHA256 7bb5c7a8a051135d73437c87d65c4ff6f4f5fecf8759a7ebabf008f4d85dc0a0
MD5 1d9e0d5628112d7ad65882780935de6a
SHA1 892ffad012ac3d61a518300e3a8868243af33e98
SHA512 b7acbfca56aa6410c9f5dd7f308389fc37382c6bbbaaba91d4d05cd080e816914265cec83605998a75cc6d77b1c77370afe8e4a4211d611f591860786ba261d4
SSDEEP 24576:pi++mMW7/MEJ/5aTG+hEGuxpkdKxeO+q16nQRgk2:pQWFgq1UYg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.164/sima/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  1d9e0d5628112d7ad65882780935de6a.exe
- Size 965KB
- SHA256 7bb5c7a8a051135d73437c87d65c4ff6f4f5fecf8759a7ebabf008f4d85dc0a0
- MD5 1d9e0d5628112d7ad65882780935de6a
- SHA1 892ffad012ac3d61a518300e3a8868243af33e98
- SHA512 b7acbfca56aa6410c9f5dd7f308389fc37382c6bbbaaba91d4d05cd080e816914265cec83605998a75cc6d77b1c77370afe8e4a4211d611f591860786ba261d4
- SSDEEP 24576:pi++mMW7/MEJ/5aTG+hEGuxpkdKxeO+q16nQRgk2:pQWFgq1UYg
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2