Extracted

• • Target

    MalwareBazaar.16

  • Size

    584KB

  • MD5

    a554456e1e06f544244e44e7b23d869f

  • SHA1

    08cb3cf3384ec48bd96f87dda6dfef17e80182e9

  • SHA256

    06a66d13076422b3fae0da8a08324fbcf9a2dbc6fa042ee72e90058690f47dc3

  • SHA512

    8ac6eb37e39c727a1f7eab782a13d1dccd0f6d8164e2eb809ba4726b1a28a752943393615df3b68911af942197a206901bd83880a45db798433b0f61cff48e93

  • SSDEEP

    12288:N2tk/9c0KwonS8Bl3ruqUhfo8LiUqIASVtX6cC9aBbGv:8GMwzBH/iBsFJC2a

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2