Extracted

• • Target

    99440721399_60c547ca.exe

  • Size

    857KB

  • MD5

    d2c64c86a5b995b90770bc86f816890e

  • SHA1

    c85ae9de96c8bcb0fbf45bdbb3c60eedc86ad91d

  • SHA256

    6285ea11c0beae7a539a06ae89c2c0f5f54155cff5d7dd40ebc86fec5e090602

  • SHA512

    08c0a4d283523efadf356fd47b9a67808b5022f4475b9038fd037c219f98515e5dc3bc5161bd38fc13efc82de54557494e52f88024a4f78167054ae89eede615

  • SSDEEP

    12288:q+HCOx/dtGG5O+hONEIu966joavkYpYWG19vkR:qkFR5zhfIuHjoaMYpiA

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2