Extracted

• • Target

    3d83a42c7406a8805e6293230a4fcdfabbf740dcb2d5a1bbea4015e6893450bb.exe

  • Size

    332KB

  • MD5

    89f7e752cb6dbeb5fdfe82a67df3a9bc

  • SHA1

    249a25d0f254b074f8fcba656512a8f4a6101552

  • SHA256

    3d83a42c7406a8805e6293230a4fcdfabbf740dcb2d5a1bbea4015e6893450bb

  • SHA512

    f9da3e83577828e85930b1551022adb4f3dec5e51e22d84602cd542e59456ea3e98b317ac137b9d010f4fe8b9aef60fd13b592265ebd7a6e298db6145411eacb

  • SSDEEP

    6144:x38aRUwl6wrlMawpfDkCLNObM/hGBYWv3XZIxUY812jk7NguDRO:xH+wjRaNObM/svXe/8CvAs

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2