Extracted

• • Target
    402bb5fa6a7705a7e17b875603d060b1.exe
  • Size 1008KB
  • SHA256 25da3411fc286610b0eb8361fb1eda38ee4e260c0379a685bb84906b31d7041f
  • MD5 402bb5fa6a7705a7e17b875603d060b1
  • SHA1 fa15614b1271ed3c6014db0e04a54948f6e7df54
  • SHA512 2d82149ee5ebc9bcc9547779762de1b75aa5b8c6202320b668709a8a783a71386777ead675b7718982c873d4c5d0c8ad042a7d3bc188037af6b0eb65121ad229
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2