lokibot | fc47593091ba7f018e76d9c3855bca35d779fca7fb0878611fab04283c943fca | Triage

Sharing

General

Target

8a27788e3e2e9a21371115c371ed55aa_JaffaCakes118
Size

352KB
Sample

240601-magqksaf25
MD5

8a27788e3e2e9a21371115c371ed55aa
SHA1

57ce8d3fe1bd8d6219e8a32dc52c359f64099d70
SHA256

fc47593091ba7f018e76d9c3855bca35d779fca7fb0878611fab04283c943fca
SHA512

500b88a8d2f7cf8f7ad641f05ea21a3d4d8545bde8734355b7cb8fa50fd67c00e603f85e3da9b011a9311589bbdc879921fa64c77a82c9d5d746a41f0812f3b2
SSDEEP

3072:tQrP+TJYpXSHIG6mQwGmfOQd8YhY0/EqUGD:tC+TJgcd6bUfFdXThU+

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://youthwinger.com/let/Panel/five/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  8a27788e3e2e9a21371115c371ed55aa_JaffaCakes118
- Size
  
  352KB
- MD5
  
  8a27788e3e2e9a21371115c371ed55aa
- SHA1
  
  57ce8d3fe1bd8d6219e8a32dc52c359f64099d70
- SHA256
  
  fc47593091ba7f018e76d9c3855bca35d779fca7fb0878611fab04283c943fca
- SHA512
  
  500b88a8d2f7cf8f7ad641f05ea21a3d4d8545bde8734355b7cb8fa50fd67c00e603f85e3da9b011a9311589bbdc879921fa64c77a82c9d5d746a41f0812f3b2
- SSDEEP
  
  3072:tQrP+TJYpXSHIG6mQwGmfOQd8YhY0/EqUGD:tC+TJgcd6bUfFdXThU+
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan