Extracted

• • Target

    SecuriteInfo.com.Trojan.MSIL.Crypt.9806.21669.exe

  • Size

    598KB

  • MD5

    73e2ad01ca484f51d94b138aa6cdfb89

  • SHA1

    6803c3c3746d788a9e5849266ebfb548676cf2e7

  • SHA256

    d95998baead7081b61ce161bac487b958eebdb15cfd29f4d94a927d0da6c02d9

  • SHA512

    a25ea2d0987b034fdd65504a46e3cecea71e5311ea8aa53abf5b241e6aed1fdc447c013209d59898a91830873e39e6befd7a8adfa0777fdf4ba8affa21dfe37b

  • SSDEEP

    6144:Hi0uwoBl0QK/FIi6YtYLxdIzz51eY2a6xZsnTjZ+nu0WyHI4DxO/yJL7V9RwHAh8:YmTl+nu0bxEq3PRV2dy5RsGDBI05Y1X

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2