Extracted

• • Target
    29700aaa1450d6b23716c12573ed0faa.exe
  • Size 320KB
  • SHA256 be24b30c4cb19b197fb44ea2883dfc535e9b76124bc3c64be34e2817feb7234e
  • MD5 29700aaa1450d6b23716c12573ed0faa
  • SHA1 201ad50ada30266abe1000451c4e46a50a7e4c07
  • SHA512 7a8a817373be070e2a926bf4e6fa75c67332ec608f7dd1de25b18fb5b803306ef4f32c2d3548a1e4b257bc7f5912ef5323c48f2ae99703e192df9bdc04836c86
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2