Extracted

• • Target

    004cc0803bb20bd71c217c0a7987420f3b6fffec022b6c1c1f20b87b86b1de9c

  • Size

    404KB

  • MD5

    4bdd7d8d5654613006b106e800fef483

  • SHA1

    d7ae5aa54cad9ffd8a7d2573e5eba2279cfa17c9

  • SHA256

    004cc0803bb20bd71c217c0a7987420f3b6fffec022b6c1c1f20b87b86b1de9c

  • SHA512

    f7310d21eff0700b0638768b4134ea0f43af634f7265eb20020a2759522fe83038d4c42ef30f44854a3e618808b2b9950da60898b357c151b060f67fc7045d5b

  • SSDEEP

    12288:PcI07ouHH1J+0wSocWeSG4Z5wKjpJqszz2R1g0:EYu1xocWhzwqPH2R1

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2