lokibot

General

Target
56114.exe
Size 552KB
Sample230524-jwjkhsbd87
SHA256 b7af929b8d99a8a2ec29774cd6c8cf77071b4c865bfe140aedf8b181ce54df89
MD5 5b562778de038beebbee780c85c97463
SHA1 0db815b4f4041b9a1b068ca35a65998b5f627df2
SHA512 d8a5f097ee87dd83286e31421e0e969373a70b191c136d67cb91ab5298082e3c3cf949b424407d766d8432a6097ec8fa810e19de3a9f047d7f0a67209f30b0c6
SSDEEP 12288:ohtPplTY6RhKuuwRSxYN7MSyHKjOcUzAF1nYNS/ukzfDF:ohJTDEbwRSx27MS4sOcNF1Y/kzfDF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/fresh/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  56114.exe
- Size 552KB
- SHA256 b7af929b8d99a8a2ec29774cd6c8cf77071b4c865bfe140aedf8b181ce54df89
- MD5 5b562778de038beebbee780c85c97463
- SHA1 0db815b4f4041b9a1b068ca35a65998b5f627df2
- SHA512 d8a5f097ee87dd83286e31421e0e969373a70b191c136d67cb91ab5298082e3c3cf949b424407d766d8432a6097ec8fa810e19de3a9f047d7f0a67209f30b0c6
- SSDEEP 12288:ohtPplTY6RhKuuwRSxYN7MSyHKjOcUzAF1nYNS/ukzfDF:ohJTDEbwRSx27MS4sOcNF1Y/kzfDF
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2