Extracted

• • Target

    77a93431058bd047444be5a23d9bc4a0c2c7142b79c7988f984141e81d317760.exe

  • Size

    504KB

  • MD5

    e858270c07905d87972aa5d58e82555d

  • SHA1

    006318fca7b778666fc4a6b0a4d397933cbeeef2

  • SHA256

    77a93431058bd047444be5a23d9bc4a0c2c7142b79c7988f984141e81d317760

  • SHA512

    f64fcf8658b50a3e0bd6f69527253cdfb7663e38b36d33fa80e3a7651665eaee96398cfff7b76a2064a48fc56e6e9aceb09e5b0f7f2a9c8ce0ff125cddb57936

  • SSDEEP

    12288:CFIsPAv5EmdFpLdsUuY9gY/VYfc+e1lR5PDD:MIKo/BRXuOgY/VYfc+e7

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2