Extracted

• • Target

    365ee9ffdc4bf18f837088cb56943a90a5da4f1bd86f431abf2994e218b60e0c.exe

  • Size

    705KB

  • MD5

    a088dcb9ad5349ef886336c6ebfd85e7

  • SHA1

    91b430e9640c43b684d9ca98944c5b191b94c57e

  • SHA256

    365ee9ffdc4bf18f837088cb56943a90a5da4f1bd86f431abf2994e218b60e0c

  • SHA512

    15b70be528b0804b7c88d3346b740766c53b6629e9eb4e970e39e4fec6d2221204bf164598cb598b09aeae811dc60f395bdee8896b10e30528b1a992c48b45f2

  • SSDEEP

    12288:GVfHc4SeSMdN+zORpcoxr8z9i7+pvrc4N34:GVHc/ebIORpjr8zw6Rrc4N34

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2