Extracted

• • Target

    P0175ABS-CBN-Holdings.exe

  • Size

    285KB

  • MD5

    0d8b0dd69daf0d39cc603f956595e35f

  • SHA1

    49e50e11215708caeb308fc1a57aa80c936e630c

  • SHA256

    3f1a286996ad27b8d31bd4b13c22eb8f3a575c26c42596da7933c1dd87c31401

  • SHA512

    9f344aa05956f46974e4addaab37851fd8106123be16007e7f63281ad3641f8bedf06add2cb9a8ef6a719cd0fcd8ce61aae09cbb5103f0fa91d4039b5ddaa2e3

  • SSDEEP

    6144:E/sFh+cdvj//bB46PO6Rvxtdux8tVic6Qu16kGTGSPpVVWZ/XWSEZMccSg9Sn:tFpvj/944tja8tVp6QuAZLVVWZmLtu96

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2