Extracted

• • Target

    GXSAG2404911757.exe

  • Size

    490KB

  • MD5

    924de9f4a334fbcf9026cb64bf1b331c

  • SHA1

    bf65e2ddad03edcd345b4506913aba7aa1ad5c56

  • SHA256

    7b387f43bf5aefd8f4bb62ffc70756f0406f0194281a2b991fee89b340ba2170

  • SHA512

    7e725b54d5c78b701ae7af8cee086d42b1ba6359ca594b7c1b4d011df4a970fa4501e2e62601defbd4c10a077d3bb66baa0f1053e095fdf18b05b7f66ef2528d

  • SSDEEP

    12288:7jd/iFIsPAb/z/wYsyD6scyAoYcQmyQ2cLLoCr7jY4X5nM9KBXi/:HdkIKyb4T66ZyAoYFmyOLcOHX5nhi

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2