lokibot | a94ecd9f815adf74fc72003a8b1821367aad501fbac1b0ad5a7bcb3690548fdd | Triage™

Login
Reports

Overview

overview

Static

static

5

df6dc00a4d...18.exe

windows7-x64

df6dc00a4d...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
df6dc00a4ddd9eee48cf8c603d313e8e_JaffaCakes118
Size 926KB
Sample240914-ea3daawbqf
SHA256 a94ecd9f815adf74fc72003a8b1821367aad501fbac1b0ad5a7bcb3690548fdd
MD5 df6dc00a4ddd9eee48cf8c603d313e8e
SHA1 65388712d073f18fe054bc78ff59d56d96398046
SHA512 dc18f525cae73f3c9443a4c24669723ac566e16e341819c2dc816fda694db46768e497a153fbaa3b05f94e2c1b135d62ec0e4c2de5d6b42a4f91f55b86fc8792
SSDEEP 12288:Jtb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgayCfdAEKddnI2+46A:Jtb20pkaCqT5TBWgNQ7ayCfdABIN46A
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lokibot discovery spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

df6dc00a4ddd9eee48cf8c603d313e8e_JaffaCakes118.exe

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

lokibot discovery spyware stealer trojan

Behavioral task

behavioral2

Sample

df6dc00a4ddd9eee48cf8c603d313e8e_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

6 signatures

150 seconds

lokibot discovery spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://155.94.211.199/nature/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  df6dc00a4ddd9eee48cf8c603d313e8e_JaffaCakes118
- Size 926KB
- SHA256 a94ecd9f815adf74fc72003a8b1821367aad501fbac1b0ad5a7bcb3690548fdd
- MD5 df6dc00a4ddd9eee48cf8c603d313e8e
- SHA1 65388712d073f18fe054bc78ff59d56d96398046
- SHA512 dc18f525cae73f3c9443a4c24669723ac566e16e341819c2dc816fda694db46768e497a153fbaa3b05f94e2c1b135d62ec0e4c2de5d6b42a4f91f55b86fc8792
- SSDEEP 12288:Jtb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgayCfdAEKddnI2+46A:Jtb20pkaCqT5TBWgNQ7ayCfdABIN46A
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot discovery spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lokibotdiscoveryspywarestealertrojan

behavioral2

lokibotdiscoveryspywarestealertrojan

© 2018-2026

Terms | Privacy