Extracted

• • Target

    a26e16d509a27265de9e3cf3cd5bc96d5e13b2ce1709d54d82ac8885823b35ae.exe

  • Size

    583KB

  • MD5

    2a8b4be893e8e3d091d47dbd1491d80e

  • SHA1

    31e302c707d6cf8f7d949f54f26955b9ff6aa17f

  • SHA256

    a26e16d509a27265de9e3cf3cd5bc96d5e13b2ce1709d54d82ac8885823b35ae

  • SHA512

    ebaa3dc379c69f40ef1fa627c6c9c65c397338cca96b0da56b560f377bfbce58cf10ce9c6fc22d8f0ed6599efedbd72e4fea4d5757b834377763d12d9bc104b4

  • SSDEEP

    12288:0DWET/mr9Ke8BcDgbNHib+2Sd+GiBrUIonw6kR:0DWteB8qFO+28p4

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2