Overview

overview

10

Static

static

3

42f87d3df6...18.exe

windows7-x64

10

42f87d3df6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42f87d3df6143cfa4de2965e2ea0d38d_JaffaCakes118

  • Size

    302KB

  • Sample

    240514-zemhvafc51

  • MD5

    42f87d3df6143cfa4de2965e2ea0d38d

  • SHA1

    b41e898f0342665d5d47a9bb68b7c55e1f1f16e1

  • SHA256

    a2c3e585be7f3cd577cb394e9cb7205c6c495ef3605be040b6becc147313a0d9

  • SHA512

    d8a4f646fdc748bd363fe6c578ec54ddda364517c5f9f6c40f8e25f81d8bef372702d652a635e1af646e24195f9df69e489f981b5b89297792b32e282bf669e5

  • SSDEEP

    6144:QDqZNjBqguq/ZNPPExJBSi2Rci/bgsWVFrol+zn45pinu4pmOrwG:GqZNUy/jPP643g3zxnJpmOrw

Score
10/10
lokibotcollectionspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://omann.ir/awhy/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      42f87d3df6143cfa4de2965e2ea0d38d_JaffaCakes118

    • Size

      302KB

    • MD5

      42f87d3df6143cfa4de2965e2ea0d38d

    • SHA1

      b41e898f0342665d5d47a9bb68b7c55e1f1f16e1

    • SHA256

      a2c3e585be7f3cd577cb394e9cb7205c6c495ef3605be040b6becc147313a0d9

    • SHA512

      d8a4f646fdc748bd363fe6c578ec54ddda364517c5f9f6c40f8e25f81d8bef372702d652a635e1af646e24195f9df69e489f981b5b89297792b32e282bf669e5

    • SSDEEP

      6144:QDqZNjBqguq/ZNPPExJBSi2Rci/bgsWVFrol+zn45pinu4pmOrwG:GqZNUy/jPP643g3zxnJpmOrw

    Score
    10/10
    lokibotcollectionspywarestealertrojan

    • Lokibot

      Lokibot is a Password and CryptoCoin Wallet Stealer.

      trojanspywarestealerlokibot

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks