lokibot

General

Target
FedEx Shipping Documents.exe
Size 945KB
Sample230605-glv5fsfa73
SHA256 09c6284a6a3ff23dac87fb515c96d20cb67f33ec6afda9dd79bd2debc70bb3f2
MD5 c1504b281d60551dc430711499a5c68f
SHA1 a28bbe6174d609f599e7feddd1c3c707bb0bab97
SHA512 7fcfa66ecdc4dd19f48905b0a5d6c637b1dd369a0a216c8f34f1be22c911624cd02e844414625021bf27c369cb443720b4ad2e71dd224919b601a726f92e1e35
SSDEEP 12288:bpDQW8CrvfzwLVYKP/0UpmJCKUpoK5Af1fDrQM7yrBxCA:gjpo8q1fxy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://161.35.102.56/~nikol/?p=143606594
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  FedEx Shipping Documents.exe
- Size 945KB
- SHA256 09c6284a6a3ff23dac87fb515c96d20cb67f33ec6afda9dd79bd2debc70bb3f2
- MD5 c1504b281d60551dc430711499a5c68f
- SHA1 a28bbe6174d609f599e7feddd1c3c707bb0bab97
- SHA512 7fcfa66ecdc4dd19f48905b0a5d6c637b1dd369a0a216c8f34f1be22c911624cd02e844414625021bf27c369cb443720b4ad2e71dd224919b601a726f92e1e35
- SSDEEP 12288:bpDQW8CrvfzwLVYKP/0UpmJCKUpoK5Af1fDrQM7yrBxCA:gjpo8q1fxy
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2