Extracted

• • Target
    f726fd6a7230b32e89603a181effd380
  • Size 546KB
  • SHA256 2d4db38cf9cb9e42160b40381f4f053326b6cfae1dcaa5bc0607f5e382c1a8ee
  • MD5 f726fd6a7230b32e89603a181effd380
  • SHA1 e4f1f9a747ddfcf679b55a0b68985f2021bf20ce
  • SHA512 ec9bb3e08ad23ba8ddc4dd4309134f3873570cfe2c9b94f57adf8e130aebc261cf01a0e0d93a00a32fe8737d9131c411fc9f86fea23c4abad41b953360898062
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2