lokibot

General

Target
3710c53cdafb8ab8214fd1428a8c48c0.exe
Size 554KB
Sample230421-jptf5sgf2z
SHA256 55fd1b3c7d2846e3877b9dc4cc5b78a89415ed66335d93c5bdf6fee4309832ef
MD5 3710c53cdafb8ab8214fd1428a8c48c0
SHA1 3411633b8b0808e3ca366e079f9f2afd2d70ad0b
SHA512 dcfd515974eec76f1e8ee7c7f3ca3d740b11d2c33c7baaed1c0255e528a273e81ce18129a5a88c10bd0d951b4e0cca6ab51f720ba33b7f2aeba3d967ec26a408
SSDEEP 12288:mFWeA2RmRRJgSXDEXQbKznm/r4wh2GPHIh:m49/3DqQOiUwhfK
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/zang1/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  3710c53cdafb8ab8214fd1428a8c48c0.exe
- Size 554KB
- SHA256 55fd1b3c7d2846e3877b9dc4cc5b78a89415ed66335d93c5bdf6fee4309832ef
- MD5 3710c53cdafb8ab8214fd1428a8c48c0
- SHA1 3411633b8b0808e3ca366e079f9f2afd2d70ad0b
- SHA512 dcfd515974eec76f1e8ee7c7f3ca3d740b11d2c33c7baaed1c0255e528a273e81ce18129a5a88c10bd0d951b4e0cca6ab51f720ba33b7f2aeba3d967ec26a408
- SSDEEP 12288:mFWeA2RmRRJgSXDEXQbKznm/r4wh2GPHIh:m49/3DqQOiUwhfK
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2