Extracted

• • Target

    Fowtronix October Order.exe

  • Size

    1.1MB

  • MD5

    529bf93a7a6496a052242a6f329c09f2

  • SHA1

    60e8459acb0ad1a5be89b20179ce88ee1f3e6584

  • SHA256

    6313ffbb1c480443bc4a59134d424a3c6b7087d023dc32eb9a9a08521a36be3c

  • SHA512

    66d93adfb150e82df124bb129bcdb9dc3eada400c6fd105385a3182357e2a6ed61962346c1031bc73a0c167a95c74a59fcae412aba5d43d849a1fa45fd4a2989

  • SSDEEP

    12288:EUcBv7AtkOId5RYXN7asgzymD19L69K08ygiXueLvMD9LTmaMdxipRT+FfMuu15V:KkJIdsl5mDb6cJdiv+LTmDdxawfBu1j

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2