lokibot

General

Target

a80c1b546741e52112ad5be70bcf078b.exe
Size

575KB
Sample

230123-xvef3age6s
MD5

a80c1b546741e52112ad5be70bcf078b
SHA1

b86d4744385557ab5620a9e52d33a3f9e5cc388d
SHA256

f96f2dc00edf430af1b60c783867a75415e55965fbabea46318ebbef910d9a76
SHA512

717d2cbd8a1854103309a87e17aedd915b1feca0b4ec04861a63affc8ab05169fd5335383331887673105dca4465fdf241ba81b02cad53d141fe5e34aee6c9fc
SSDEEP

12288:QC66Bm2iNN1od8xDilEmu8XcXLrGp66B:FVM1rQ8IlEKcXfGpV

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://171.22.30.147/kelly/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  a80c1b546741e52112ad5be70bcf078b.exe
- Size
  
  575KB
- MD5
  
  a80c1b546741e52112ad5be70bcf078b
- SHA1
  
  b86d4744385557ab5620a9e52d33a3f9e5cc388d
- SHA256
  
  f96f2dc00edf430af1b60c783867a75415e55965fbabea46318ebbef910d9a76
- SHA512
  
  717d2cbd8a1854103309a87e17aedd915b1feca0b4ec04861a63affc8ab05169fd5335383331887673105dca4465fdf241ba81b02cad53d141fe5e34aee6c9fc
- SSDEEP
  
  12288:QC66Bm2iNN1od8xDilEmu8XcXLrGp66B:FVM1rQ8IlEKcXfGpV
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2