Overview

overview

10

Static

static

3

bfcb0ab74a...fe.exe

windows7-x64

10

bfcb0ab74a...fe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfcb0ab74af7e794dbe2da7aa909f559e17af827ad40c9762cf7df9a7323e8fe.exe

  • Size

    345KB

  • Sample

    241120-2jslrszjcp

  • MD5

    aee0472d69d4394683135d304f93adfc

  • SHA1

    f945613c962e63843236ce308ce595fa1f323ba3

  • SHA256

    bfcb0ab74af7e794dbe2da7aa909f559e17af827ad40c9762cf7df9a7323e8fe

  • SHA512

    4d35606ac932022fa1a093cba8ecc92766b6d99dd53dd40c20c3e842fcda6349df18a64105fd9c6d5309a769fdea4f369b7d4853d51bcce6c4ec435e9b7ce53e

  • SSDEEP

    6144:XrydTW3AHIooGEArx3i6VaiGuBKIugXd2qP4XTMDV/xkAkLOoTu:XGdKQHIoTEArDQNIugXd2qPaMDV5kvDu

Score
10/10
lokibotcollectiondiscoveryspywarestealertrojan

Malware Config

Extracted

Family

lokibot

C2

http://secure01-redirect.net/ga13/fre.php

http://kbfvzoboss.bid/alien/fre.php

http://alphastand.trade/alien/fre.php

http://alphastand.win/alien/fre.php

http://alphastand.top/alien/fre.php

Targets

    • Target

      bfcb0ab74af7e794dbe2da7aa909f559e17af827ad40c9762cf7df9a7323e8fe.exe

    • Size

      345KB

    • MD5

      aee0472d69d4394683135d304f93adfc

    • SHA1

      f945613c962e63843236ce308ce595fa1f323ba3

    • SHA256

      bfcb0ab74af7e794dbe2da7aa909f559e17af827ad40c9762cf7df9a7323e8fe

    • SHA512

      4d35606ac932022fa1a093cba8ecc92766b6d99dd53dd40c20c3e842fcda6349df18a64105fd9c6d5309a769fdea4f369b7d4853d51bcce6c4ec435e9b7ce53e

    • SSDEEP

      6144:XrydTW3AHIooGEArx3i6VaiGuBKIugXd2qP4XTMDV/xkAkLOoTu:XGdKQHIoTEArDQNIugXd2qPaMDV5kvDu

    Score
    10/10
    lokibotcollectiondiscoveryspywarestealertrojan

    • Lokibot

      Lokibot is a Password and CryptoCoin Wallet Stealer.

      trojanspywarestealerlokibot

    • Lokibot family

      lokibot

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks