Extracted

• • Target

    PROFORMA N.71A 030223.exe

  • Size

    561KB

  • MD5

    e0159a317ce13f73c7dd98338d9be097

  • SHA1

    54c677b005842eac47a29db3872be5088f006eaa

  • SHA256

    fbe33894ce251973a6b8d01c80c6b3d40aebf299117b243c70a574f7cfc49727

  • SHA512

    45181e8d5c967a073ef1d5d53da9cf93ad88a84b8527e86f09ffe80174c731068c9eee3fc3c6a3268b33e5feb7c4c07f541d5979dbf1dc431e95ce7c103d13a7

  • SSDEEP

    12288:U8ZJCHkyb1UQ1f6Z9iSSy32o2MqqG4yPa:UwJUbyQxAh2o2MqqG4yPa

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2