Extracted

• • Target

    3d236d99c28f06dafe221fcd14237baf.exe

  • Size

    584KB

  • MD5

    3d236d99c28f06dafe221fcd14237baf

  • SHA1

    c138dc3e089984703385284008256e7d54a6992c

  • SHA256

    7e78fb488448e47f877769b0b27f93d13ba8db13af442c0d8c3df58f44bb34d6

  • SHA512

    ce8085c3bd87ba82cdf53930917595b899d4e36de68353ba3a390b235cb715ba83fdbefce80ee84c6222532224a5d466fd1673a94311fb8c25ad92c94fbfa595

  • SSDEEP

    12288:CJ1lzg6sBdX5+t4I8hLxb7OI2qu+TMFE5q2hzV50sKnnX4fQGHimOMt+:CJiBdJ+V8hl7iVGpU4xHimX

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2