Extracted

• • Target
    14b15b50c92f3533a5055d70edbce4b9.exe
  • Size 352KB
  • SHA256 70a932556ef2e5111fdfbecc1ed65ada2c3f17d0e3aa5a43dfa308abe0139afb
  • MD5 14b15b50c92f3533a5055d70edbce4b9
  • SHA1 3419c79c8b4a08e55578347042ff5b72459aea57
  • SHA512 9381bfeac60a84e282f1bfcefac560ded72ca4f090bf87d1ae9214fd67208cac379b0c9aa20bb7a4c658feffbf8dab1538119749332fe2af658d707c3cfba976
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2