Extracted

• • Target
    c53496699705f1e13b57307e2c848d37.exe
  • Size 436KB
  • SHA256 8cd7b7de5ee297ffccffb4b76da64f4e3dbbda669dc444785e0962b2b6a3b011
  • MD5 c53496699705f1e13b57307e2c848d37
  • SHA1 5b2b2741f28f0c2dffa7e3dd421bb7d95b77d027
  • SHA512 a4b3f670680e93ba94944784ccaa7ec825a253f61edee71d7e9877ab29b2affc81b3a0e010a0dcb4f15efd340966280ff5cd3ba83b697da28951ac8b0ab54b97
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2