Extracted

• • Target

    Ordine acquisto(P.O6203445-2022)RePack.bin

  • Size

    105KB

  • MD5

    7abdd7b46e204f69452344f821dfc99d

  • SHA1

    525c14ff94e42616426bda28b6af65f5470f9699

  • SHA256

    01776c46935fef61bac717af6da47b5181f69228b6548d6665d9b337e814109a

  • SHA512

    9cd4bf58d768eb46af6c603843f7818bb6b21218c8867a5aeed3b7cbc503d0615825d9af797d0f0cb3cc9a74bfe93f3ccde5296f383fb4555aafc2084bf24524

  • SSDEEP

    1536:jZugsgD2opxPySCBthi1Ln5J6tbB4l8ljRWcplgMPocPoJ4TGEWx4/2JemVcl:jZugsAhpx6SCBthi1j5JI2cwzDe8Y

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2