Extracted

• • Target

    0895613dd4462d19ca353caea2efdf89d0fb8f1918e73d1ac74ec8a5fbfb827b.exe

  • Size

    489KB

  • MD5

    625e9c7c84a6a483a495626a23875a4b

  • SHA1

    73ce99fbd50d348305465ea209f5c87c52fba0b3

  • SHA256

    0895613dd4462d19ca353caea2efdf89d0fb8f1918e73d1ac74ec8a5fbfb827b

  • SHA512

    f9c5de9976e878cda5e805f66825127fc578cde33f5b1ee2ffe9b9e855528939000f6a1b7aa3de3756ced10b57ac20969c0e5a4b1a7ca8440c77204e741141a0

  • SSDEEP

    12288:zbs3/5X6MAch7DxSCJt9K1uBX16U+qK2ui9aZy/:fwBp5VzdbBEpqKpi9aZ

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2