Extracted

• • Target
    cedca83dd808936727659e5227386839
  • Size 568KB
  • SHA256 c038069e737cb2c74934c0e86449fb4e37d7bbeaef092cfe06e925431bcb4806
  • MD5 cedca83dd808936727659e5227386839
  • SHA1 29383bfc7324f909a2dc2dd795c23534858fa443
  • SHA512 d6ed75e6a475b4b6a7cac64900477e535b7a63ae2fe66781d59f9850e106ad71faa49f4258d6a10fddd9ac5dfe77252aad0c31e2d9be59d21752da2a77b0a78a
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2