Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.32200.19599

  • Size

    716KB

  • MD5

    c0bbbfe5e764f8067bac91a3cf45489a

  • SHA1

    b66ef4d5d79b6f16ff354506348143aa25a711a2

  • SHA256

    d4b09cfb630c5d4e123f5ea5076685911243496f62f489cf7a30479542096f35

  • SHA512

    22a25660f43d75d436af64ec7d70116d292d475789424ab1f33d3947d73b2b2bde0075f0c156973d0401b8f9b7d5f53d95b1bd887f54272a6da22aab9cf05a78

  • SSDEEP

    12288:7lKnuAEXqXdVu4gzzGqjVm0z95jRDmWqGekYS5vwBQvdLxlm:QR4qXdVzgzF9ZRYkYS2BQvt

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2