Extracted

• • Target
    b9a95d88a05064b88d912247e2a45ce8.exe
  • Size 270KB
  • SHA256 a8b4b389c495f249520ca634c9b0b3af1bf75ec54557d7e151c8416bb4a4d133
  • MD5 b9a95d88a05064b88d912247e2a45ce8
  • SHA1 b6cd4a9a36c4eba738622305a865fbf4e1b93a89
  • SHA512 ed037c5a83ccb31473dacae94d9db6869b59bad71385b5baf0aa207096cf4d07246641785a4c67cfe9e26e7c9ba778fb40a5316685547a19a329ed5f52b43781
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2