Extracted

• • Target

    63327bbf1b0a378cc3e8419ba34385e5ec8d47a04f90546eaf31c55f7fff15ea.exe

  • Size

    547KB

  • MD5

    d29862a821bc742d24c346287c79ca1a

  • SHA1

    30a36578576a17b82a6338fd72ad975b5d82e794

  • SHA256

    63327bbf1b0a378cc3e8419ba34385e5ec8d47a04f90546eaf31c55f7fff15ea

  • SHA512

    282a034bb366042f8882140377af646c88dbdbe5ec4bb77ca5717f9266cc04e3ab6768eb94858193f2f465bda239be00aefdd317b407af2b1bd5c8f061303422

  • SSDEEP

    6144:rf5nyB4b2znBDGjUG7ygNGNm5d+zA1qz75sMr/D29Fr31/PzC06x7CGYbx53I80g:rfV9yBSjUwzNdEAAmvr3Ze06RC1vl

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2