Extracted

• • Target

    054527988476fbdfcca3d4eec4d530c5529e2360b3f84beab0578b1411cad952.exe

  • Size

    359KB

  • MD5

    24899e0590707e01cd9fbdfab6dd922b

  • SHA1

    ae88a813c9dd1d766134789052f1e8e1ecaeb4be

  • SHA256

    054527988476fbdfcca3d4eec4d530c5529e2360b3f84beab0578b1411cad952

  • SHA512

    1c514b5cccd7610260a52f8810c8bfe67c9c7d18d31a7fd1d85a1bb3ace5ff9e2212599653f323cf022a8c0d1f5a28bc8f32b59c87c4c9428fe7e852109c9f44

  • SSDEEP

    6144:XUYNazqRCG5W3N95g8xzxr2RFx7+/3qrjTepYSUtKAhJMmo+g1R5E/meXvgDSgi8:EdzmloBxzxr2Rv7+CrHD5tlJyDnK/mek

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2