Extracted

• • Target

    20376bcf9cda69f3b64a52aa7408237a.exe

  • Size

    594KB

  • MD5

    20376bcf9cda69f3b64a52aa7408237a

  • SHA1

    7d4e74475cf90faea5cc8aa9013c4b78488b143e

  • SHA256

    f60dfec6143b9281322904f2adb3787919478cce77e4f44c216f0b204f5a3fc9

  • SHA512

    0ba7db459978574d93daef144546adfa8a62a71dfbf4a99ee9d7dedb8eb3e3f80352946446da56e310903c341546fa345b3cebe0984cbd35d9c8c82f538e2f91

  • SSDEEP

    12288:JMKx6Me45zLCbdovmqZjjKayTG1BPUoXEUIDg+:JMJ4JCbdotjjwG3ZyX

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2