Extracted

• • Target
    5507731070ebf3b3bb9e93ffccf03624
  • Size 461KB
  • SHA256 8ee299b5cb422c1b4ef7abe32d84a659741fa344423638008bfd57b8a4e1a2c5
  • MD5 5507731070ebf3b3bb9e93ffccf03624
  • SHA1 a255566fb9d102a1351eb36fc86b9f2f1203dd45
  • SHA512 5f822bebc5f22b86dab0bacd1cff6f773700f55ae5a073347bb126f20ef1e7399bc216aa3780c12dd281a219af2c2c0fbd834438a9bc47cfbfbe4d4fdb0d1d91
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2