Extracted

• • Target
    8871c3cc72ab3378479b80c4422f5c70
  • Size 287KB
  • SHA256 56a3a322eca6f37c99a453a05e7cca8b260eb97900eb93a9e6188f810f41d4a2
  • MD5 8871c3cc72ab3378479b80c4422f5c70
  • SHA1 ae828e208c40894977cac8003f3b86c216c04377
  • SHA512 4dda411c1aeabd68fee776dad86389befcd3385dda398da0b9bf72839a76ca1cac8da57c257aff9b4c15ca7c120006074217b6dc9b8928228cc13ef7f90982e2
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2