Extracted

• • Target

    Surat_Penyerahan_PPH23_update_july_2020.pdf.exe

  • Size

    575KB

  • MD5

    13187746c5e3d526db4f5fa97218fc59

  • SHA1

    d8c4e08595fa4e16ac65bd619a8e701e10566a30

  • SHA256

    4dd20ae06b9a6d97087f3b7023bd68847640a6326d532029859472142cfbb9fb

  • SHA512

    c246b0dee145da8af8db8bff3486908b87f67469a4694317919ab0c58dc6aa59407163eb271f7773d3ba1ba2b78a1958f462dca70b5c568986a46fcac9a9d1ac

  • SSDEEP

    12288:ZPOuvPFClYKfrf9fN30Wvza5TQ9DwVYCc4qjx:ZGIPQYKT9lcxODgYTjx

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2