Extracted

• • Target

    8f452907a97d806d962315ba166f89ef

  • Size

    467KB

  • MD5

    8f452907a97d806d962315ba166f89ef

  • SHA1

    f9f68ed3bce640f1b9c5de2c213ee6793fe8289e

  • SHA256

    5463a649756bd0c22d0e604aca9a7c5f1cb886d4666c013b61077aaaa9992728

  • SHA512

    99e464cc3cdb1e705886d6bb12e518681a0c85c02e080ba7eef894802911433187cdaaade66b25dd3488a181c3af90c0d039120892b434a726465befe622fc92

  • SSDEEP

    6144:FQ3R6/VOA55wg6AoP8LOyKL8s61CeeDA2OBsdcNiiduTRgNjXaiaYtYY:K309O+Wg6AoPZ8DKIsWyONraiaYtY

  Score

  10^/10

  lokibotzgratcollectionratspywarestealertrojan

  • Detect ZGRat V1

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2