Analysis of A Lokibot InfoStealer
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Code Injection - T1540 Credentials - T1589.001 Hooking - T1617 Keychain - T1634.001 Keychain - T1555.001 Keychain - T1579 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Hooking - T1179 Keychain - T1142 Hooking
Show in Graph
Common Information
Type Value
UUID 98db49e1-0835-4142-884c-5f282f6879de
Fingerprint 1c3c5cb29bab4e85
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 8, 2020, 7:57 p.m.
Added to db Nov. 9, 2023, 1:22 a.m.
Last updated Oct. 15, 2024, 4:35 p.m.
Headline Analysis of A Lokibot InfoStealer
Title Analysis of A Lokibot InfoStealer
Detected Hints/Tags/Attributes 26/2/5
Source URLs
Redirection Url
Details Source https://securityliterate.com/analysis-of-lokibot-infostealer/
URL Provider
Details Provider Source level domain
Details securityliterate.com securityliterate.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 231 ✔ Kyle Cucci's Cyber Ramblings https://securityliterate.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
smallthingstress.sytes.net
Details Domain 5 
ckav.ru
Details Domain 7 
fuckav.ru
Details File 1 
ever.exe
Details sha256 1 
49b9a126a7e543b1279c0863795d21cabd5eaa7d4a4e8b6dc1df717bede1559a