Extracted

• • Target

    Statement_31_01_2019_106068.pdf.exe

  • Size

    452KB

  • MD5

    2ca87e7580e1cd813e6da33803572e49

  • SHA1

    9746252f6f33e26badcaffaa0d2b60bc2c75fdad

  • SHA256

    c038efe46f382f2072ac571e511a10a17dd18656dcc92c9bd4e63f75f8b60ed0

  • SHA512

    4efbea2393de5b3a64c66b999032fa32f293bc8d80f0cc2fe4d377b6c84fb9774aaee847254d778623b49866ded55ae4ff6359f2835dd9ca30096955a40f3ae6

  • SSDEEP

    6144:EGafnavbICNyMoIy9fK5S8k7LA3jwb6LLc:EGafnavbICNyMoIy9SQj7LojwuL

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2