lokibot

General

Target
PO-1193353.zip
Size 507KB
Sample230719-pg6z6aed48
SHA256 312deb37d14c63aefe2884680c218432aefc510a565aa68ed584d35c839ce694
MD5 75fbc939b7644359a5ad9acaa578c222
SHA1 dadd79230008669925be29bb8d1a18eee443863a
SHA512 9cfa7b6bb5aaa6f6c9da0d49bedf51d9187ca68f132d8871f0f7293446be29bbca0bc961dcf8972c0cae87434e9df21d543cd2a558699e7a7ca8905f3408c04a
SSDEEP 12288:tcU2gxvS2P3i3ua/Hjd+775PtoNAOnKM0YrA5Cv8vn9:tcUXZS2PGboHfoNADYVvg9
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://185.246.220.85/ugopounds/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  PO-1193353.exe
- Size 559KB
- SHA256 95934ccfa95253459a4caa462ebcb4435c27ef7ce1d3a7aa4c8d6ddea9806938
- MD5 103264e1af3afccc182abbb66ff64bb5
- SHA1 96765da528bc4bc406894dc020adafd080e04af0
- SHA512 87541ea2c33d08f75a33e1cc9c667b8eb64a5b4ada65b7490f53f60dba08e5606281093bf58d283bd48bdd55ae0cbecd40bb16dff9f3ad2ba6a5188213b8c68c
- SSDEEP 12288:tPYPfY7fpf88MbfL5wiE4UYLXb57GdWacRmg8D4jd:tPYPglfabz5wiMkGEpx
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2