Extracted

• • Target

    OUTSTANDING INVOICE20222.exe

  • Size

    691KB

  • MD5

    bbcf4c3eb99f83a44a33756f4d60c510

  • SHA1

    451a5e797841a7efd3b6ed5508cdda7f158bc9c3

  • SHA256

    bdf40e1a0b438ef4e304c034b2c10f0226cb710a824a12cada02557b49164654

  • SHA512

    e48a9db5e2461b1dbde60bd21c9a50c927566cee311c2984f3a3efa937b4a1c3f82ab50bd1752892a037c1c0a2ae689a66c7c0a265b4b5d7846a16097c394797

  • SSDEEP

    12288:d2m8Pf2ZlA+wwanu0b2idzV+ngRe2Ai6hWLKmGOGwgNoexY/NTlEc:d2Aewa32irRO/QLowgNNx8NTl5

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2