Extracted

• • Target

    3ef6748718e356e17a6edc5b7e60784c6ca011748421b0163ef3ab43741260f8.exe

  • Size

    503KB

  • MD5

    51f1fee73b718b767fce1ef9c33b1faa

  • SHA1

    25631c3c8a52166dfa46db1d57f4acca4a38546f

  • SHA256

    3ef6748718e356e17a6edc5b7e60784c6ca011748421b0163ef3ab43741260f8

  • SHA512

    1e4c45e7aa2951c0d4258b909ca062ed16148b4fce5a14bf5277fd1c5781ccbfceec333efdc236ba5cc9ec12082913199b524b2df67292b1abe3478bbafe8b8d

  • SSDEEP

    6144:fij2hYUvFIsP3Qm5cedrtLioM33dGON9ANms1XqZMr+hkEZVOdT+B0FlDwuJk6UD:rFIsPAedrR9acg9mq2CvAdK/lIb

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2