lokibot | 130dc6e3a2e25652fede712bdc94d4a58bef4e745e438a23553a19d618c6bfba | Triage

Sharing

General

Target

a806a8cd55a709863aadb416fb210b58_JaffaCakes118
Size

142KB
Sample

240614-e9cxnsyhnl
MD5

a806a8cd55a709863aadb416fb210b58
SHA1

0fc92b039e916c6721b202be74f47046aa14f89b
SHA256

130dc6e3a2e25652fede712bdc94d4a58bef4e745e438a23553a19d618c6bfba
SHA512

131c10ace1a23632bd2fb32eff67261d2b0b629743f6abe800c706894cfda17d862242158b41db89ccfd28e8144ce3f79703de1b6545619d0769fa2f9024f6e7
SSDEEP

1536:dfvYrTpCip2NiL2eK+gxw0Vxes7/imsaoIzmdH2ZiBr1u:+3uFGexegDroUGWD

Score

10^/10

lokibot collection spyware stealer trojan

Malware Config

Targets

- Target
  
  a806a8cd55a709863aadb416fb210b58_JaffaCakes118
- Size
  
  142KB
- MD5
  
  a806a8cd55a709863aadb416fb210b58
- SHA1
  
  0fc92b039e916c6721b202be74f47046aa14f89b
- SHA256
  
  130dc6e3a2e25652fede712bdc94d4a58bef4e745e438a23553a19d618c6bfba
- SHA512
  
  131c10ace1a23632bd2fb32eff67261d2b0b629743f6abe800c706894cfda17d862242158b41db89ccfd28e8144ce3f79703de1b6545619d0769fa2f9024f6e7
- SSDEEP
  
  1536:dfvYrTpCip2NiL2eK+gxw0Vxes7/imsaoIzmdH2ZiBr1u:+3uFGexegDroUGWD
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Accesses Microsoft Outlook profiles
  collection
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lokibotcollectionspywarestealertrojan

behavioral2

lokibotcollectionspywarestealertrojan