Extracted

• • Target

    fdb20bd07c5f92285889e67be255950f.exe

  • Size

    614KB

  • MD5

    fdb20bd07c5f92285889e67be255950f

  • SHA1

    8fad6e560fca0c9e128684d123947bf9a196afac

  • SHA256

    138a5f951399c688c4f860a1d5ab27a187ec6498720b538b269a343b1769127b

  • SHA512

    8d0c1d28297d9500e955aeb4cfc54607a2c56f35040a4a4a8a88620742e9ca664e3290d28c7a17bebe17d61e40a2f4ecb103774ce030313f2ac04994ed378e60

  • SSDEEP

    12288:mWakXftnekh95bJGwxKdWyh+dhPcAzKoVPwQlQX:dFl1Pb0wxKdRYRckKcwQlQX

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2