Extracted

• • Target

    Podrobnosti sledenja DHL.exe

  • Size

    912KB

  • MD5

    a2e005bdcc76720da667ab965193ffbe

  • SHA1

    776a1264c3fdda86f71ef8bd36473f79d5c1af13

  • SHA256

    eb7f51f978836163862f83bdf21c822b5a1d68da9fe7b93de2e60a94d362e6ab

  • SHA512

    84bcd0c8b31af26c35420de2753ac586a9fdef0b7d152280b85734eec925832761e58fd1e8371b90ae1722560abb226eed827ed83aebba19d59f84d844ff0997

  • SSDEEP

    12288:6LeMdVorLb355282aPfy7zzK2N2jdknCGNa3z5LErq095/ZCAxXP7r9r/+pppppL:6yGorX3m8mO2NidkCCa39k95/ZJxX1q

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2