Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.18165.6818.exe

  • Size

    613KB

  • MD5

    4758a063f737c4cbd89a8ae27fe51f46

  • SHA1

    33a78c132bdfcdcb1d55d26770942f076ff3dec8

  • SHA256

    9b7d88f0ea7556298e0dee39226de3688d8df6d237bfdb6d7ecfa7a8dac85bdf

  • SHA512

    f41ffd21b9ee1fad0f169e7805954fc772082488b1a6ef9d6f0c9dca1984f21c2f860d74187e882895388b46180500eb22fb2d010817c336e1d8930b645e9098

  • SSDEEP

    12288:4LK/pbMIRwwAFTKySdcGBtF4V4AmlaBJe5YZ4VX2i3QkR:4LiMIgTKyCcYapBpS2i3X

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2