Extracted

• • Target

    8dd83883d8daee30f21adb85cff72ca768a80559820dd1770399c3f5c86f52ef.exe

  • Size

    981KB

  • MD5

    d528fdd2fae1e4f0c01ce1ad1e0a7cfd

  • SHA1

    6cd09f12f43e69594e2d049c0435c123316d4308

  • SHA256

    8dd83883d8daee30f21adb85cff72ca768a80559820dd1770399c3f5c86f52ef

  • SHA512

    b7f2d2752f97664faeb42ab588396795096ce13545397306c2db979ef06a95138c7200a6ce25bf6862ac1bd45966e4ddb743be561cd06f71d9698859ed644ac8

  • SSDEEP

    12288:N3NWNXazC4s95aM7U/N8LnBJF9Fvj1aYKIEk6g5UY5FM3MFH5r4uDYhStl:Ir5Hk8LnBXTr8YlEIUY5FM3hu0hSt

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2