Extracted

• • Target

    68894cfd6f4a1bfff344f54760726df7.exe

  • Size

    431KB

  • MD5

    68894cfd6f4a1bfff344f54760726df7

  • SHA1

    9ae844e3abd601bf5daca1e3ebe331591388493e

  • SHA256

    07c1a82c5517f92f78a830e12cb1813430c4e02e02c1b6d16cd8d632f80d92f7

  • SHA512

    ecbff66abb82def82b0b51f24b0f9a58bee7f214ea83630c48ff0dd65a308e9ec54248e756948967729ecfd0d0c524a84e7230b3935cf8779160d491b6716797

  • SSDEEP

    6144:T+hiQ1o1W5UoKOy2Y5Dd1yh2gReb6d0VOw8qRBGEPU49ogCvrFbtKSyISGgEJFs:ifrKOeRch2g0zVf8qRkSU4+gOxlcHwF

  Score

  10^/10

  lokibotspywarestealertrojancollection

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2