Extracted

• • Target

    6695845ad86f868589cb2863793a6ede2e84d37ae5aeb9e879e027572d25d8fe.exe

  • Size

    515KB

  • MD5

    fc82dd607bf8069ac0defcc1cb8d6b38

  • SHA1

    e4e8ffe86a95150190ea0984a6258def94baf231

  • SHA256

    6695845ad86f868589cb2863793a6ede2e84d37ae5aeb9e879e027572d25d8fe

  • SHA512

    a944548df6c16d6f84a7b49994004e408fb0c9b7a4fed4c2a1a7ea911d549377e4bf3a07552aff262fc198697f5c88f58611c0a7e0a3d1ea4c5b38de69327d53

  • SSDEEP

    12288:QuJrYCFd6xtcceSvQmT4REB7PNHdXal7HZsIbHa3dkR:L81xa6vB7jXaAIzGA

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2