Extracted

• • Target

    cb920401372c7fa8780d060a37ec4e54a7b966e1c362d2ec41a26bd3c9f4f43f.exe

  • Size

    491KB

  • MD5

    44b1b326fa901873281772d00ac72928

  • SHA1

    0b5ae07a2e0f85e122792eb4a4621252d980413e

  • SHA256

    cb920401372c7fa8780d060a37ec4e54a7b966e1c362d2ec41a26bd3c9f4f43f

  • SHA512

    3b1489b0987522285e8ad407fc815db4713cc77d5c6a66b62af6ecc8489a6c8f410eb2c965c78bde2fd2bff828ca065821ce4bbd02dbdc1e08c5939e9ccfccf2

  • SSDEEP

    12288:QE/iFIsPAb/z/hNtAxAlZ76jjaw+s8gw9EluXVSjirz/:JkIKybZNymgjjaw+IZ2v

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2