Extracted

• • Target

    TNT Receipt_AWB87993766478.exe

  • Size

    403KB

  • MD5

    36ed13b511e448619ce8ee5d4e8942c0

  • SHA1

    1cea63be94a4924620772c65ffc1d8f0522cf6e1

  • SHA256

    cf62df26ae345d82c6fda70f630da7e4525db99463fcb2fa69a26d5d8a926275

  • SHA512

    478d3ac710a809bffcf1fcfde1abe4792ffb013fee820767703fb365ae4166b293b0e78d43b2188246cbf2bb53840b93aff17df487baf8612e2dba9c7496d2dc

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2