Extracted

• • Target

    619b4e680f74f6c69a48837fd9ee5851be850035c46c12aaf0669139d1061de8.exe

  • Size

    602KB

  • MD5

    6b3cd623626ab815d5f59d87e8408275

  • SHA1

    96bac856b48ff62eee4416efb605dbedbcea5748

  • SHA256

    619b4e680f74f6c69a48837fd9ee5851be850035c46c12aaf0669139d1061de8

  • SHA512

    b7ed2edc5005f03f0b44f4c732de9f26eeb781d9e8668c0394acd1ad6d5882fb1841eeba9bb29a4e4bff1736c0c6382e452e5f3c19cb71469d757f77196cca13

  • SSDEEP

    12288:b9MR4VJ8OnhdQP5vlzAtKyaB7Nx3geXcF4ds:ZMRO80XQhdkzGHrXcads

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2