lokibot | 3a7c1d44222cdd3bff4b06171c98d519448d2bd528b23837451ceedd40b2520e | Triage

Sharing

General

Target

4c838b01eaccf2d1132732c224009ebd_JaffaCakes118
Size

352KB
Sample

240516-xcnxsaae9x
MD5

4c838b01eaccf2d1132732c224009ebd
SHA1

b44f0ca71a5d61b22ebe5df1ef14f586aa1bfd40
SHA256

3a7c1d44222cdd3bff4b06171c98d519448d2bd528b23837451ceedd40b2520e
SHA512

7e1743fa3306bdf4fa3290c490fad3880cc60f3e2d2c3458276808e6a26655da45a2ddd273ce685cb1c1d9392ee37d41477b93816498290f1d3aa68685737adb
SSDEEP

3072:hqrP+T1Yp2SHIG6mQwGmfOQd8YhY0/EqUGr:h8+T1Vcd6bUfFdXThUG

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://youthwinger.com/let/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  4c838b01eaccf2d1132732c224009ebd_JaffaCakes118
- Size
  
  352KB
- MD5
  
  4c838b01eaccf2d1132732c224009ebd
- SHA1
  
  b44f0ca71a5d61b22ebe5df1ef14f586aa1bfd40
- SHA256
  
  3a7c1d44222cdd3bff4b06171c98d519448d2bd528b23837451ceedd40b2520e
- SHA512
  
  7e1743fa3306bdf4fa3290c490fad3880cc60f3e2d2c3458276808e6a26655da45a2ddd273ce685cb1c1d9392ee37d41477b93816498290f1d3aa68685737adb
- SSDEEP
  
  3072:hqrP+T1Yp2SHIG6mQwGmfOQd8YhY0/EqUGr:h8+T1Vcd6bUfFdXThUG
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan