Extracted

• • Target

    MalwareBazaar.30

  • Size

    610KB

  • MD5

    fcb454d6c9e847dce8648ef9feb461ae

  • SHA1

    dfcd666c00e85a1e9f9a484396ddbf59673d3ad0

  • SHA256

    1abfb687c7a8ce81da6ac312940fa5f59dcc62cd953abed9f834b0e7d3866677

  • SHA512

    a70d1ff91a5dce38b47bdfa09373a46526990e1f449fcddebb08a5f7bf0a21b3d7551e118f7af8bfacd360d0b4090dad262af951ca2e616354bad30fb0624392

  • SSDEEP

    12288:8pahc5wOevADY1HQqfNGdRYoix0VYWsX0imyfK3:8Zd4GGHFfNGYoM8sXseK3

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2