Extracted

• • Target
    7a2c3fca2df8e3d174709f13b89b7529.exe
  • Size 480KB
  • SHA256 1e9a6fdb3962e5cdd09664751f1b01ac2fd3f3d743bda8b5050743ac3de4a442
  • MD5 7a2c3fca2df8e3d174709f13b89b7529
  • SHA1 ec7e457cf15aa7e7a9d8fcd94b8bd8b5bbec1ab1
  • SHA512 2b33bc90f084d1603b539ce33f73f8ed6fb7bad9c40403d39567482a9932724a13bbeb0be92a03058806e628412a0a3c0a8fafb42e7854cfd63d826ee5b844af
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2