Extracted

• • Target

    afe85814e7a8f486add9755b55294237.exe

  • Size

    122KB

  • MD5

    afe85814e7a8f486add9755b55294237

  • SHA1

    90f7210abc41d73d7164e85fca2aba41152afee5

  • SHA256

    88f2b5426060120f9c5bbb40724b89b4a15253746f136704461e9a116f3cf842

  • SHA512

    432a7bcc40895c8318785499183556c81a8fddcf4292093b516d5c2eaf9b8ff191bb6ddee97d07e3a473c6e282b22e404d16e2def3a61949a949419936be9ffe

  • SSDEEP

    3072:qUJoFfWzzl+cSMr902QnBrxLpnjqmxPwEyWhm+syBzVM:qweEpr92nBrB5jqmDxyyBzVM

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2