Extracted

• • Target
    f4555fabbebf7bf33f7be8d90a9fdf38.exe
  • Size 590KB
  • SHA256 c1d9b04bca7264c76a2eae6357f6a2fc931237f374db992a926db9dd714b85c5
  • MD5 f4555fabbebf7bf33f7be8d90a9fdf38
  • SHA1 5faefd107a77ed4bd6a1f4352936a28cf96c5d42
  • SHA512 b7413d59e3fc8c40c967a82af72d6c8b7df792f5a796d055f542f0fdacffb708028336b5469447d57f575f5831db38cee69a6c1c8d3e441d9e9169e248fb766b
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2