Extracted

• • Target
    5ea24e32645a71f1ac5a0e122fdc9aff.exe
  • Size 730KB
  • SHA256 cda4901e34db30dc7438f3e0a45715cc40b870ed0eb2f5f1e7b3dec7d0228a5e
  • MD5 5ea24e32645a71f1ac5a0e122fdc9aff
  • SHA1 85dc06cbb3415fa759a43cca08f3a8d9d6738a64
  • SHA512 e1fa46fa8e06c4e6305924c28538f631123eeb10c42e9f2f8731b41971181b629041a4e84923f6db5f0fa8fb277a399133bd1551e0f09c9ad82df61b8288a899
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2