Extracted

• • Target

    gunzipped.exe

  • Size

    123KB

  • MD5

    dd4f5cbd58b0f61c045bb5dd0a843fa5

  • SHA1

    689376a01eedaa37df77f054efbcb48ab637856d

  • SHA256

    a11e5e97a308ee046545cfe0167079f89968f9a1d7ae0b8a9dbc7dc39cbe2e09

  • SHA512

    081101de416c8422009fe125e7f1d047a83e11dc710439bff2b2d52f810d263aacea18a3f82fc0a6d791e90362f7a14bcaf0143003ae0ec70616e6b0eb81495b

  • SSDEEP

    1536:0+feNoQi3CjLGpIccs2SxXTf2WN9+Zu4VqWwryRNPTYtxYTnAeHz5JTpSUDzctjr:Uoh9csuWCSkN0wnA6z57SmCo8H

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2