Extracted

• • Target

    000005067_04977188.exe

  • Size

    563KB

  • MD5

    d0a302425fa89ea4a42caccaba7cd84e

  • SHA1

    ec4bdd62e04932ef5d1942ec33ef97a9d7848833

  • SHA256

    8a0795afe89fe36a1ee16af973575015106814aa2e4421050f9ec1fca3be9887

  • SHA512

    ea95b07d25e817e6d28b5cc9fd20ea81f351bc790a94a50fc2226f0e0b34f1fe5d752f087bab25ff3d7f7b29596f0866945b3a7d6e36d00f60fb26e7ee720844

  • SSDEEP

    6144:Np3UqQO+cs9L3K26Sk0IdU7nEnbhgvSuZJHgiWpiADnLhwDckjQI1mnKiN:NjAcU3nHEivSsJHgrpiADyckjQc

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2