Extracted

• • Target
    6yUO2GccJjuSKit.exe
  • Size 737KB
  • SHA256 68d5e9dbf70448b280c8697a5fd76e2eb32f8c007aca38ecee5545ccb7161fe2
  • MD5 59cbde13c9285fdb0ac3cb85b0e8add2
  • SHA1 57bb08110020607573c23808711ca31f5a0de940
  • SHA512 c14233f38b6f12a881e6e6ac3f2e80fc240d5da087014869beba29c204980b527bb655888b372748e5f07f7041628f2a887c7f00aa7941eaea2e51da9d18adab
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2