Extracted

• • Target

    PO.exe

  • Size

    624KB

  • MD5

    461435a0209320befa140d18ed5db575

  • SHA1

    d858aa46e07657eb836cb554d86710a5ca6d4cc1

  • SHA256

    e523dd1e51303c2be9fe5cccef1960524a5b6de9bb2aeab9e4e4cfc94c86db32

  • SHA512

    1bfbede6ae8f178a60b46c1f9a01025b0e9f100b01a17fc67bffd10992d1c85af58e0a32df00052a6c3acab4019045fae0b9ec9226f756ebbeb30d0c5c175a80

  • SSDEEP

    12288:PvV+s1bSQT6tjjdB40qlhueo7lCDRLKRQksHjVRJEaLx6sohHZBgqWwzAi:PtpDuewlCDlwzIjJEkxHc5J

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2