Extracted

• • Target

    RFQ - 85Y64738494_pdf.exe

  • Size

    625KB

  • MD5

    6f365d1b266b1936315d73ec1a8dede0

  • SHA1

    130823ec4dea0edeafd4054f4cda25c61a653ce9

  • SHA256

    3f90a1bc78a794d6d4767a4019877315b5c7db201347acf7e339d4439e251465

  • SHA512

    7719ab01ed48f117d507ccb4b2e8a29a810bc7efb1c1193a75b06bfc3d458cc24dc17c411924602a4c3fe541b0663a57217c07865478ab3c656af144aa7b3278

  • SSDEEP

    12288:XbbIXPod2iNq39oo3F5/W+ttkBFkf/L5PyCj0nXo+2FTQe+7E3:Xld1w3io3F93tOByf9PT4nXtU+o

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2