lokibot

General

Target

ea6bd8a856fd5939df9b0104117bf8a3_JaffaCakes118
Size

1015KB
Sample

240919-cza9zswelc
MD5

ea6bd8a856fd5939df9b0104117bf8a3
SHA1

3859a5a77b850311d32dedbf5a54b77c889a8748
SHA256

402b48eeeeafa1685df024878c883f2674632dfe511f8238d3dcea35fc06840b
SHA512

b94863f61e7b7419bfc50d6968689c47c22b9092c0c9f936f37d097b5fd4e5af3eb1201fb0234262bf6fbc60f5e6b3d4aa0974d9a5ff23e3430adfd01cbaea4d
SSDEEP

24576:Eg5zF/FSAIjCaGH+xkWlsHLwhO/9YmaDn6rr/qKoSBoAwXKN:ZYfaLRYmaDnoqKoS6fK

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://taolay12.ru/Panel/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

- Target
  
  ea6bd8a856fd5939df9b0104117bf8a3_JaffaCakes118
- Size
  
  1015KB
- MD5
  
  ea6bd8a856fd5939df9b0104117bf8a3
- SHA1
  
  3859a5a77b850311d32dedbf5a54b77c889a8748
- SHA256
  
  402b48eeeeafa1685df024878c883f2674632dfe511f8238d3dcea35fc06840b
- SHA512
  
  b94863f61e7b7419bfc50d6968689c47c22b9092c0c9f936f37d097b5fd4e5af3eb1201fb0234262bf6fbc60f5e6b3d4aa0974d9a5ff23e3430adfd01cbaea4d
- SSDEEP
  
  24576:Eg5zF/FSAIjCaGH+xkWlsHLwhO/9YmaDn6rr/qKoSBoAwXKN:ZYfaLRYmaDnoqKoS6fK
Score

10^/10

lokibot discovery spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2