Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.3712.15735.exe

  • Size

    689KB

  • MD5

    5a95baf3f4033ec7f912b12ef62524ed

  • SHA1

    71dc20b2a556014aca0212f2bb850d0ea012db92

  • SHA256

    83f728b15948edc0e352dfc7f33f37622a3f49b5c343064a0df08d462ca3bc64

  • SHA512

    0fd81a1b4c227e077697fc60e6134878e734817a9421787beb7e5344ff118f548491c15153ce1b9679c14a24a26d031175da55c5b4cde61752d098001df8da59

  • SSDEEP

    12288:RKlcUqTF1w0nu0b+NoexY/nJyvfN6vgr9yqlMob9i35TKwTls:sq51w03+NNx82fN6I5yWMJTVTls

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2