lokibot

General

Target
DHL Receipt_200674038.exe
Size 510KB
Sample230707-hccgesff39
SHA256 c024f0d2a66670201d37e12c5e96b050aa0fc217f6ef385d11cbdfb2c87ddba4
MD5 2e5f43f9290b1fe59730eb806e957a86
SHA1 ac122be53bbc0cbac66d043bde42462cbfb01ea4
SHA512 7f1b255819c1848ab7553a3ce5ac26464abdae0d73b50c6850c9d2d56ba2730372dfe9e20f4ca3d49565cb73486368da3a6a18059df48d20a47be4ed416a41cd
SSDEEP 12288:V7xbjID1MD5rewiUYK1LwR3eyuHvWTht4:V7xbUa5exUHLMeNm
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

lokibot

C2

http://138.68.56.139/?p=2744
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php

Targets

- Target
  DHL Receipt_200674038.exe
- Size 510KB
- SHA256 c024f0d2a66670201d37e12c5e96b050aa0fc217f6ef385d11cbdfb2c87ddba4
- MD5 2e5f43f9290b1fe59730eb806e957a86
- SHA1 ac122be53bbc0cbac66d043bde42462cbfb01ea4
- SHA512 7f1b255819c1848ab7553a3ce5ac26464abdae0d73b50c6850c9d2d56ba2730372dfe9e20f4ca3d49565cb73486368da3a6a18059df48d20a47be4ed416a41cd
- SSDEEP 12288:V7xbjID1MD5rewiUYK1LwR3eyuHvWTht4:V7xbUa5exUHLMeNm
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

lokibot collection spyware stealer trojan
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1

T1081

Discovery

Lateral Movement

Collection

Data from Local System

Email Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Reads user/profile data of web browsers

Accesses Microsoft Outlook profiles

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2