Extracted

• • Target

    SecuriteInfo.com.Heur.15039.23364

  • Size

    662KB

  • MD5

    9d35d496dd09ae810b69ebdf8cbe2a7e

  • SHA1

    381800f84abe314c7deb6288a7b51d038253136c

  • SHA256

    80d6d2c92cecab658cfbeb75c1735f4379d63a19d6a9c3637a17b58a2bb8788d

  • SHA512

    fbe279ea75db113063237ec1ed83c574c3499698ce5c48edbb51395dbe1800b3fe08434c581d4be28e87ba905d1eb5f30853787149db38b8451577cd4cd09257

  • SSDEEP

    12288:Jf+1Dvo4cW9RoxZfb/WT4UkuZoYvp1WZdJVONL4gp7bnXXf9KEdSA2m:JG1Q4cW9RoxZfzW/ZB1YJw0gJnnJv

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2