Extracted

• • Target

    4b0a55626c81e32082db4b7ca052028aa07c8233aa41dca19b9794c3a5c2886c

  • Size

    104KB

  • MD5

    281f04621aa774c0fba0d5a7b2eb1519

  • SHA1

    ac7e3e684fd849b1229a7196cc911e6958db1824

  • SHA256

    4b0a55626c81e32082db4b7ca052028aa07c8233aa41dca19b9794c3a5c2886c

  • SHA512

    724a1073d703282b34095c442bc7a241cc1bc816938d7952a6e985132597a58cc1fc0e532704d4961179bc0f31a422ba924dd420154dda20f7b835efce30fcaf

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqsIzmd:nSHIG6mQwGmfOQd8YhY0/EBUG

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

  • Detects executables containing common artifacts observed in infostealers

  • Detects executables referencing many file transfer clients. Observed in information stealers

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2