Extracted

• • Target

    0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100.exe

  • Size

    489KB

  • MD5

    133d3287fd13f069c75be6141adfb917

  • SHA1

    67db917071345b20f13d9b7c06a739688ad5a871

  • SHA256

    0415cad6fdc37b6ef123d454f71afbb74f7d1a4865498606f3f6b7d12b1eb100

  • SHA512

    773b10fbc087fe2380f646447286059c06fa54bb17b2cb62f862f93bb27e190e81c2238f8bb45ab09374072436da2c24968faecb7b21fd105b0660192cd425ff

  • SSDEEP

    12288:zbs3/5X6MAch7DxSCJt9K1uBX16U+qK2ui9aZy/:fwBp5VzdbBEpqKpi9aZ

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2