Extracted

• • Target

    pcF86Gq4XlV8Ret.exe

  • Size

    773KB

  • MD5

    a3c1e42dc5c3d02d9c9490d4d18a948f

  • SHA1

    85fce73b5cbabf6d00a40de14e4ed0f9e820ad12

  • SHA256

    f7244eade0a50a5930477229bdb0f48567a84d96ae1bcc6309b3712d68b3f1f2

  • SHA512

    94ba403c19edccbf2c44c03632b0e5ced4433d7ea0eeb58ce724c2114baf6ad4408f80ff239f7157ca6e3fc0985fbe0c6c05ba0313dd2a4a6214520fcdfe68e1

  • SSDEEP

    12288:iSx1OZv+6bQWULeSewFbFRaMFD3s77ynaC:34+6EWULeSewRRDeya

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2