Extracted

• • Target

    200520241615SipariP_NeikiAnalytics

  • Size

    860KB

  • MD5

    e74235674803d05c4fccafb9216849b1

  • SHA1

    d02acadae00ee5f361d249d690c863c1461a3efa

  • SHA256

    bcdb4f1af705889ace73e8a0c8626bc6b615393a4c4f28ea00e5a51eb6e541d9

  • SHA512

    34af31f44146bf0c7ccd83756f42a17a6014bb3ea124fb3e4445828ab1920afb6e852e94c71c4f75ed89e956df2e497103999ac3a955a335d2f63339a3ea2bdc

  • SSDEEP

    6144:gF8Kvv2sHeGrhlGusXBkd/bHkRuy0HsF8Kvv2sHeGrhlGusXBkd/bHkRuy0HE:Yvv2e1uusxkVuIEvv2e1uusxkVuIE

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2