Extracted

• • Target

    65e4730d75a2dcfbc8416d4726d28b9b

  • Size

    291KB

  • MD5

    65e4730d75a2dcfbc8416d4726d28b9b

  • SHA1

    34822115b0557afccb0a869158a3bfd16c715407

  • SHA256

    282b2c8f35139c3a89785d6f043b15ae8d6eed0c9e6242382a4a6ec153bbeca6

  • SHA512

    cac9166931d5be43c57985bf2ad98b8374d41c28342c34ac5226cca866513eda956b69c4deee6a753bb600840308c8797672f7b6ce08830155f61df45f5963aa

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2