Extracted

• • Target

    gunzipped.exe

  • Size

    445KB

  • MD5

    d9742026719e39649e6bcf5a9966080b

  • SHA1

    d637b4ac4a2e0a73b8b80c62943bbaec0dc2777e

  • SHA256

    07177892c2c47e5827bf6504ad8b7047771674b164fa8a026b9250f831560cfe

  • SHA512

    fce6de17d889e3cd9af2fcf3b3085719193272e023117c5e09ead3d0523114bc2c486408ec2067066753a9d67942a18a06c1457e5d132d9b0c51a2c105a6812d

  • SSDEEP

    12288:LZoa52c6bFW2NU4vVKKzmN5ALp6jTB4rmbZ9+Q9IjN:dcbM2a4AN5AV6+rhqeN

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2