Extracted

• • Target

    SecuriteInfo.com.Heuristic.HEUR.AGEN.1249305.21203.10732.exe

  • Size

    817KB

  • MD5

    508365b7033333491cb5b037e41d5942

  • SHA1

    b72daa60c9bc4a8843d1403a010ff6880d2de68c

  • SHA256

    b3f7a8b6e93ec34d757e7a5356c4bf498ad18f68acd70b6d1ecea37010f2ff0e

  • SHA512

    ffcd476f6be5058948f198bf2db47b2c78b791126af096e7d3711f3a7ef1436445c849511a24ec9c76dbfb3b7531f3418a5cbc55aef954c60b86bafb74c58405

  • SSDEEP

    12288:g0O8lpXU5ZkXodybXEyu91WxxZkBjNTh5+heuGSLkVCeAyP:gRdyb3ubWx7OBTjmG/QG

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2