Extracted

• • Target
    afed50ea4e5a307daa1327dc715b85ae.exe
  • Size 287KB
  • SHA256 6d84079d238505c8842072cafddb8bf2ffcd4a71e6bdcbc38f0a8c9afd9eda19
  • MD5 afed50ea4e5a307daa1327dc715b85ae
  • SHA1 c0875b224300718ce46aa0934f1355bd57737940
  • SHA512 4cbdf6e22662796859afdde00e0fae19e4b017c329b86dcc76808f1351a42c0f09b16fc96c19be0724241a4a586a61535ee4845ff3ead7504ae067bf924fd063
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2