lokibot

General

Target
doc.exe
Size 6.9MB
Sample230404-wqa3eaba2z
SHA256 6a45cadd3d4871e0f23d38167ec06b785a7ae769baeca36d04c65c9ccb74b78a
MD5 28d54b0e907aef7d0d1d670adf8159ae
SHA1 627daaa940bf256ed02150b528002aa4aff4302b
SHA512 a261b08a7b01b810c30bec40e05f64449a0211754b89a1b35d99d27110c5020bc04b9b0bbf47eae8f1bfba7674b9a2050681d560d7d7ea86feb4a55260d87a3f
SSDEEP 49152:QdNt72eGiQiKc+a8Oi6z83fUc1WscLqYkUdgDwlZQ2G6da3WWIVi5braQ5jlDfH3:Qd37CXa8G/2b/lDv
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://64.227.48.212/?page_id=4136377
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  doc.exe
- Size 6.9MB
- SHA256 6a45cadd3d4871e0f23d38167ec06b785a7ae769baeca36d04c65c9ccb74b78a
- MD5 28d54b0e907aef7d0d1d670adf8159ae
- SHA1 627daaa940bf256ed02150b528002aa4aff4302b
- SHA512 a261b08a7b01b810c30bec40e05f64449a0211754b89a1b35d99d27110c5020bc04b9b0bbf47eae8f1bfba7674b9a2050681d560d7d7ea86feb4a55260d87a3f
- SSDEEP 49152:QdNt72eGiQiKc+a8Oi6z83fUc1WscLqYkUdgDwlZQ2G6da3WWIVi5braQ5jlDfH3:Qd37CXa8G/2b/lDv
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection persistence spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Accesses Microsoft Outlook profiles
  collection
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

1

T1114

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Accesses Microsoft Outlook profiles

Adds Run key to start application

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2