Extracted

• • Target

    Fechas de pago programadas.xls

  • Size

    91KB

  • MD5

    e98b2ac88a1f33a371175e24c189ef5e

  • SHA1

    bd9207d48d365c37466abd11c4e10af114632bad

  • SHA256

    d5a68a111c359a22965206e7ac7d602d92789dd1aa3f0e0c8d89412fc84e24a5

  • SHA512

    b116d252e667fbb3254ce17f2decfe0e938a9557a7162f3d8e4fe4cf55755fd11458c44608cf4623750f51dce4de86d5b8522bbbf581489585c83c6417edd3a3

  Score

  10^/10

  spywaretrojanstealerlokibotmodiloader

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • ModiLoader First Stage

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2