Extracted

• • Target
    7a9302e65a81c949b9ac705b78063176.exe
  • Size 927KB
  • SHA256 5d619b8944c749501aed6403110cdbbb71ca435dcf221eb442790f5cb03bb712
  • MD5 7a9302e65a81c949b9ac705b78063176
  • SHA1 8f0e48aecfac90fa152d32ce2b36cced16d964b5
  • SHA512 7765463b18503dfbbfdee21bfe16ec8078bc650a6c500abb5f71c1135368e2b1a6dd0cce4aa0f1c64f2cafa46c4b8bef921ffae708a70f7140bdeb338451fb92
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2