Extracted

• • Target

    7a01b8892d6c438665005ce49f81b1f2

  • Size

    484KB

  • MD5

    7a01b8892d6c438665005ce49f81b1f2

  • SHA1

    ae0eb24deea38f6bd50e64e0e7b1a71180ae4462

  • SHA256

    c5d6df15d08aaaaf72c9bf96b173bc37c33f754e1e297fbf389a98af0df6b8a4

  • SHA512

    7b26d58233e8bbeb824da4d59a6859371f0eec77ee003d07671f42f0d09644fbc394c6725e581c7f52ecc9192659712f6a472f71fd78913c4d4e6340f3f5ad3f

  • SSDEEP

    12288:eMw+Z92rSOB6e8U4zOYK1jTU2l0l+GFQB:ug9Ad6eWHK1jYQ22

  Score

  10^/10

  zgratratlokibotcollectionspywarestealertrojan

  • Detect ZGRat V1

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2