Extracted

• • Target

    169b77fe54eec1c603c6fd6b48d48feb.exe

  • Size

    599KB

  • MD5

    169b77fe54eec1c603c6fd6b48d48feb

  • SHA1

    07fcf5c8bb051ffe156ff1d626ac69810e77b8b5

  • SHA256

    0f2efccbc47f236c362f889f206443ae5c0bdfbf74f4696f0ba4e76a2ce666c9

  • SHA512

    1e3d3e9807a969cb049a222e89c32c200dcdb11166de678349823e7a13aff831689e36ab4438447ce15453bfab672d58184685c56cfcc4807215b090633e3c47

  • SSDEEP

    12288:GCmTlxnu0b/F3GTotPcSpMz5guufWqL2FquwrDHXvbK1:HmTlx3t3GTuk5gDfWs2FrcLvW1

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2