Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.12144.19638.exe

  • Size

    809KB

  • MD5

    6869cfe45924c3bd855993a465c5fb6b

  • SHA1

    2da76b407581d0d69762eba2ea83c850c3d0de62

  • SHA256

    575eab2ba99c3d0a7ad715b2ffeb83f76ce022c4d653564b088540223b23cd00

  • SHA512

    34f82691bcca485d9b72a4c98249b2f4b2471ca891b04a40e023215d15f09cd3d8d8e1f8dc05f5fa362d6cefcaf6d5d619206cb9fa7b60de946002536bafb64e

  • SSDEEP

    24576:cttw5BlXfWE53FCSdFd0B3x51+TaPKSpiKOxIY:uw1+E53Faz1AaySc

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2