Extracted

• • Target

    Air Waybill NO 6979374150.exe

  • Size

    566KB

  • MD5

    9eac71e9248a953d22034f2ef58b8e8b

  • SHA1

    8ecac21fde60b00c0e5a64ff70eed48ecc78428c

  • SHA256

    4a33ff4869bc6b011f8c5c9babb2c9607326073d184f1784badf68e65b474888

  • SHA512

    920dae5944a1b726f6b17407e803dd43ebddc2801f3ed27e7c11d906855ddcda08ca73d60839cfed8b8517387742fe637b83cb7602272b6c57cab758607a0507

  • SSDEEP

    12288:G+G71t/rFfadLOUIFkYdiYlKIR4Q3lpIkEs6ZvHFswkR:xq1N5iaFkKlKIaYgkEs6ZG

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2