Extracted

• • Target

    33fd426f31fe7cb35425f7349a3b4428c005a061b3adc82c44de90913b5b51ef.exe

  • Size

    516KB

  • MD5

    2e569591aed3a0ae2be6f3f123d1a5af

  • SHA1

    7d87cbe22d17a944760a2f5441d324920880e9b4

  • SHA256

    33fd426f31fe7cb35425f7349a3b4428c005a061b3adc82c44de90913b5b51ef

  • SHA512

    72e7f386eb10a0cf8f4a05129c09af747c5c35c30ce2a5bc6dc4dd53d73f589b95c744faf65923279c5007b0a45ed36bad6aaca6287b2585afc8fc9580b417f8

  • SSDEEP

    12288:nENofC1PSmLPZ87a6xnlqG36SS0o8b0Iys4:nET1pl6aAl76FDDI

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2