Extracted

• • Target

    f9bd56989f51b598194cd551db59c95883628267a3f5ca8b87c0ad69fa7a3471.exe

  • Size

    822KB

  • MD5

    6dc6f63b7b1a593e209d062c877a488f

  • SHA1

    ff16670fc7957da27fb31f96ae17469a5125b720

  • SHA256

    f9bd56989f51b598194cd551db59c95883628267a3f5ca8b87c0ad69fa7a3471

  • SHA512

    df276f80da629c7ab78c1e913c88dc916a5564373dcf51961e4427e386612a5137ff2edbe97814dc8a4fe1499359e3779fdb46a309f7687208cae995a1f57327

  • SSDEEP

    12288:jwglEe171o1+1k155scBRTWgwxPzsohPGLCPnXFzcoUd523GY7jVtC32LhYcdc45:WnNutGuPnX5c7d52WY/V4kc4/

  Score

  10^/10

  lokibotspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

  • Detects executables containing common artifacts observed in infostealers

  • Detects executables referencing many file transfer clients. Observed in information stealers

  • Suspicious use of SetThreadContext

  behavioral1behavioral2