Extracted

• • Target

    DHL_Awb# 129448720998.exe

  • Size

    592KB

  • MD5

    0457d93e57c05e11cfba910594cd0a23

  • SHA1

    82506f45a0a9a17138efdd39a9fe11baf64bb1bd

  • SHA256

    a0d79cea0e610965b7244b1e248553be76a80dda18b210ec2479346d3b8c7416

  • SHA512

    edb0d13f52df8e81cae448d6fef75195cded9a77a6ec45acdc03cf09e08f47de56ee440d838b9bbb729222ba35b36ae6716e826c6298a301ded98bcb1d167024

  • SSDEEP

    12288:3GL21ILPzg2cWjoIBz7o/fWkLN8INGgp5d8OMXzefJthA6pBkR:WL21ILPzgrAF8BDt0mJ/w

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2