Extracted

• • Target

    FedEx Receipt_AWB# 771596460800.exe

  • Size

    839KB

  • MD5

    6161586cab6dbbe35b513f84486e8d6b

  • SHA1

    4d0918da815050a31e3df4d299e979f5972064bf

  • SHA256

    bc8a12bfd7a792586d78f4fac22f22ac9d2dfe31452d2e99b7cd47180bd4b295

  • SHA512

    a7162d76c3e089b6edafc49cc45589729258315bdb114041221eabe6c4e3c0af3e08a8d65616147084b75a8dd6229e5a7bcdad667db836470930a7bcb58aeb5f

  • SSDEEP

    24576:fhl06MFkUpkYXjPg7v1dNE4zrV5u50cXkJ:5lL89tTI7Lm43Pe1M

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2