Extracted

• • Target

    913f2f9a1131b26bb6afcc715fc914b5ead5c2a4ffc91a3d19e51292ab3be1ca.exe

  • Size

    395KB

  • MD5

    60c8e751c1caee5b01cc878231fea5f4

  • SHA1

    d7bc61e04f58e428658d3ce86461ceadf2019548

  • SHA256

    913f2f9a1131b26bb6afcc715fc914b5ead5c2a4ffc91a3d19e51292ab3be1ca

  • SHA512

    45a7f0dbb7e9ebcdad9e834fe6156590e98d776db78426b2ddb2529b92c554584f4433d09de7405e36342b836d95693fccd372f1049bc4166f5078f8b3922241

  • SSDEEP

    6144:WmijPECZwxTMr79U+dykVFJvMDxvacgN2DPAXhPDKdJsd7uUQ0KDOSrrW4iAHlZR:Wmij8w/Mkxv8Lv8Xorsd71Q0IO0r/F

  Score

  10^/10

  lokibotspywarestealertrojancollection

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2