Extracted

• • Target

    SecuriteInfo.com.Trojan.Packed2.44597.13100.10553.exe

  • Size

    1.0MB

  • MD5

    bf41da07d6f0f07eda3505e10438fbad

  • SHA1

    984c06c2f8ad803b7fb520520204ae49dd989649

  • SHA256

    bfd4c6e93569ce5fb18f0196d8d9a15dba7d080d7881f1faf71e43f4fc543941

  • SHA512

    7068bc6330d40b47b0ddf53a86b0bd516555e7979a64b76702e456c2240afae86e83db4242408b77ec644638a0733475b82fcfbd0f4be82e7c1cbc33a6cfcad8

  • SSDEEP

    12288:a1wj9GBFRodOv7Uc7igxye8gB0Wj+xB5ETWBNhkg2JUUONsZ1DX/VDJ:HJG3qdOvoc7ile9aWEBO8N2VON

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2