Extracted

• • Target

    recibo_de_copia_de_pago9884038.exe

  • Size

    287KB

  • MD5

    b64bad63393a769438902dcbbf5e5ced

  • SHA1

    f9d21a97881ccab02a07fefd34afc2685f21e2b0

  • SHA256

    4e4feb5f1bba50c6f1c97791119d8ee28afb3d8d390ee6cf92da7e929d97dd5c

  • SHA512

    8014acf1022bdb56d95b1da5c189a53090c72123de48f11d5fce3954867a376837bb66f8d1b87e654793a354911a15b0e98a97a338ff6050884331d00552e7d6

  Score

  10^/10

  persistencespywaretrojanstealerlokibot

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Blacklisted process makes network request

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Modifies service

    persistence
  behavioral1behavioral2