Extracted

• • Target

    varfHrA4egaLtqN.exe

  • Size

    748KB

  • MD5

    8c2f7a8389c92010879d74165a3b91bf

  • SHA1

    cd288698b8333ebfeace50f78f38048b701fd3d5

  • SHA256

    6bd93280c677623b4c964daf8cea0c20ae3c32ea8cee4c2e52da9a8b3dfc5ec8

  • SHA512

    c4ba9c9c0da2ccf35fe74516118bf38749763cf0a6b3712a70be98c1d9ed1dd55f9c1324461a2a1db817fcbfdef9fd54424664efa19c128389b237c6feaad74f

  • SSDEEP

    12288:oFlLKHFjcsqUWk6I7RKnmKCuK3RURS1wBAtdAj6oD2K5OxFXinkIm5vZnWxOb1q/:mK7RK2rwWU6opc2nHm5fhqTL

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2