lokibot | 6e60550a33d25470c7d89ea1d8afa1f2e742a1cb6f4970ed48fcbdeeb7940002 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.PWS.Stealer.29680.21070.10491
Size 577KB
Sample201214-j7sjte76fa
SHA256 6e60550a33d25470c7d89ea1d8afa1f2e742a1cb6f4970ed48fcbdeeb7940002
MD5 78d493ef50791ebd6c8b7a6f5e7cf421
SHA1 0bbacec042c08d9623bd8571cc34ac4917b6f08f
SHA512 46cc535deb9ec552a9cd57303f6086ffa593d6ea884fedabbcaef365df69ffeb3454588cf05f57afe053576a4b53334be645fa2ccf62dfcdd22a952186b773cf
MD5 SHA1 SHA512

Score

10^/10

lokibot spyware stealer trojan

Malware Config

Extracted

Family

lokibot

C2

http://begadi.ga/chud/gate.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  SecuriteInfo.com.Trojan.PWS.Stealer.29680.21070.10491
- Size 577KB
- SHA256 6e60550a33d25470c7d89ea1d8afa1f2e742a1cb6f4970ed48fcbdeeb7940002
- MD5 78d493ef50791ebd6c8b7a6f5e7cf421
- SHA1 0bbacec042c08d9623bd8571cc34ac4917b6f08f
- SHA512 46cc535deb9ec552a9cd57303f6086ffa593d6ea884fedabbcaef365df69ffeb3454588cf05f57afe053576a4b53334be645fa2ccf62dfcdd22a952186b773cf
- MD5 SHA1 SHA512
Score

10^/10

lokibot spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

lokibotspywarestealertrojan

behavioral2

lokibotspywarestealertrojan