Extracted

• • Target

    30549ededc9343048de37ae6eedad29b958f4b22c5b250570acebfdfa566a16a.exe

  • Size

    990KB

  • MD5

    3550a54054b24a230912f40ba88e612f

  • SHA1

    fc3165116b97192b8c2740fdba2a742566982b43

  • SHA256

    30549ededc9343048de37ae6eedad29b958f4b22c5b250570acebfdfa566a16a

  • SHA512

    a2feec00804b2c23a27610810137dacfa638d2b5f56b45704c675a24c419cbfa905e4d2b34a82177f0bc2cbf6b0044b59c94d9703f253f75e450c0f614ce507b

  • SSDEEP

    24576:DxlH0Rs/8yc+HqPeezKthfjVNuwbFOPSKI00:llH0Rs/K+HqG3thfjVNuwbFOPSK

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2