Extracted

• • Target
    3af13a30bd5683778f41a8955c9226e4.exe
  • Size 952KB
  • SHA256 b175691f3ae7cf1c2f79c8de0fdb0fa798da53a5220892ff65956bc43b01b883
  • MD5 3af13a30bd5683778f41a8955c9226e4
  • SHA1 81ce8389659aa973cee2f8b5c44056dbff4b8aca
  • SHA512 80898071cf800a4109c3c33810b4991ae26379bd261c95278cd1321099966ed5c4064247cfebad2840fd15dcb79ad48311814607c079af9cf30f02ca609a0507
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2