Extracted

• • Target
    MDC0083763988.COM.exe
  • Size 655KB
  • SHA256 8c28be8d03e03cc453d1d00056cc6e317b73eec62cee2f6eba7d8dcd72cffd03
  • MD5 4f88c1a2c68152bd669be0e6d0ad32ac
  • SHA1 d4b70e3ea826dad3b39a1fca5c8007d890de6bee
  • SHA512 2c0535904c74a7d0419611ec8792d839b1836c95e385e79df587914b89d5d4ec2137a0256e782f52f1196b70dc59d06a6254e5d254f43525e99eaf5adcd7c881
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2