Extracted

• • Target
    c891cee708b7b9a95b5165e0d2be0f6a.exe
  • Size 564KB
  • SHA256 bde19e5d6dd3a25d4e9000047abd15c5cde7245d6e0f1a7da2c327395e94cf8a
  • MD5 c891cee708b7b9a95b5165e0d2be0f6a
  • SHA1 2ae8e47f5dc14753425dd89c9b9fe28d0e78fc99
  • SHA512 cfb7b6892a1196c172bbdd6b17420fa3bfa53c9a33483786b9446197f6a6020a672dad4181480d63414895bb785cc9d36bb8239077f8b9e3e47ca3d3573e77f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2