Extracted

• • Target

    42505662b763b8443718c92df52389213cf88cf7f14b7c71df003e44b8a8db62.exe

  • Size

    722KB

  • MD5

    cc311df25b3e747f9af2be2e3819e5c8

  • SHA1

    6cfca0614bfeb5db2576b0f6c4e243f780ad35b8

  • SHA256

    42505662b763b8443718c92df52389213cf88cf7f14b7c71df003e44b8a8db62

  • SHA512

    457b9a7a28f6daca8f3b3d5b60ab3e9a9548e472b442365cc19900ada1c67f30d9f2b773ea738abbd04648e38897de312a79d645b2124a1ee7da1a2da177b678

  • SSDEEP

    12288:8CLPA38qpXfH934p8YBfJZESTcnvUexERtAHGMM8sOrx7p58lCrd4gyQapWMsS:5A38gH93C6S8HHGM9drxN5IC54TWMd

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2