Extracted

• • Target

    69aa032feb31ac2f4be69daedbbaa778.exe

  • Size

    841KB

  • MD5

    69aa032feb31ac2f4be69daedbbaa778

  • SHA1

    e8be338027012eb25d4ef173c11833f6a22f34a0

  • SHA256

    27a76f7fb0fa5630adad494016a95d53607d0e3f2a3ba98e62ed7d98aad7d882

  • SHA512

    f6305e33996d6a7fbe6f2f220e60f05efeb0d596c9f69ef8e30a6f0d15548a78001fd22e72c391de066b17ec37d91746e2561dc6db00cf97a02e67a0d25a675c

  • SSDEEP

    12288:kqROTapF0KhRQv16ZrAhK4SDEPW0WFvqyzDJ2u:k+yapedyDoWFFI

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2