Extracted

• • Target

    34535.exe

  • Size

    200KB

  • MD5

    0f4f9161105a35dd3e7d49508975a226

  • SHA1

    d432f59177bf1e80837accc93810c0b7218b99ea

  • SHA256

    a1c9498de481ec4a7eeaf021a28ae3a9a0b23b3abaab89dfd29a7c85aa871f87

  • SHA512

    9b1a679f20d0e1b58b0ab12cf81304eee3702ac54febeb0d7705b6bc38d726037941e2fdf388f3aaaf849fb11474d085dca6de8db6567577a68f61a7e87316f6

  • SSDEEP

    6144:vYa6gDtFIRhUlFHrFRzTpxOTMXxAz0oQpH4r:vYuDtEyxrVwTfwzFe

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2