Extracted

• • Target

    DHL Invoice 1224811733.exe

  • Size

    631KB

  • MD5

    c2c8c721e9e7e01e6be671662a1024a5

  • SHA1

    5840020537c3a491f967e1ea6d76b1c406c953bb

  • SHA256

    069c5cef3137864269c1b8e7e7c4674b2a5fe17cc0310e69b4e1403ea620a51f

  • SHA512

    4b8ebee7ce64594e58e0e456348dc776510d854d8cf6cc9b36cd29f6bc1370eefa6dbe975ce5c99951244aca9e7042db6b41117458494910a16665566e2a10af

  • SSDEEP

    12288:BM8SBos9cCDp/WgjWoGDKAvkvn5mdLm2NPFWujayOJjdmcYxewzT9ckv:OPLInhSnQX7bjPiPYxJHikv

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2