Extracted

• • Target

    PO. pdf.exe

  • Size

    611KB

  • MD5

    26d938e936501c40950dddad234a7e25

  • SHA1

    3b89ab83aef9bfb294f9a83c774533459fb0f6bb

  • SHA256

    3c5b0462854d7115d4e6a6c1e1154ae2bfe6df8245328a6db34d6ebfe77f3e34

  • SHA512

    e99aae5469a053eb323abc644751d4a48c226e3b9cdade588f49030b9c7d1e0cb5b0602690d356fc7e1abc54e56e2e417adbdcd77a0a03cbb91400ba165e6e87

  • SSDEEP

    12288:CWtN6EcUrLpWLvjwcFPYSABWB4CDODFwrltD:CznLkIPRnODirlt

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2