Extracted

• • Target

    c564c0450bd7792b93ffa8e9e238f710e2b5ce46c21de499f83ca764477fdab6

  • Size

    580KB

  • MD5

    4d6a0789205bf65317eb37a2676ca96f

  • SHA1

    c4226234299a9b1a5a6d6c0f2aa015d0e14e724b

  • SHA256

    c564c0450bd7792b93ffa8e9e238f710e2b5ce46c21de499f83ca764477fdab6

  • SHA512

    5cbe84f43860b64a3a2a97c7845bd5d2916a2bf48d5cb6482f55fb62844ed29e01801e4650aa198a6e615fd1195d08eecada2a44767da36111fe91b86cc755cb

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2