Extracted

• • Target
    wininit.exe
  • Size 859KB
  • SHA256 4309ff34bd00c8f514a9633c1a89b34bb3821efc66a13b9fd960d5e4f81d186a
  • MD5 18e510c9d9cdde60afaaeb9994f7a805
  • SHA1 97e0ee79d70ea5994b7ced192811a4b7bcd329be
  • SHA512 ff6780bdc4f88ef8a988e7668d860725bc17e559eb4f6b4b4d2e0e8872ddecaf9ad0b4998dd7dfb2116b3e167aa5f07a1060bdbc479142c7a4183648857a7a84
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2