Extracted

• • Target

    FZC-11573.exe

  • Size

    571KB

  • MD5

    1ee969a77677757bd39206a9aeb49cc2

  • SHA1

    e1ea51e11ac68a9ecc5c6b508fe4827372055f8a

  • SHA256

    89f071e1363149bb86804389d3d144b71de15b92bedd3fca7f79c47297f0d6aa

  • SHA512

    80135bdae6d8bc75a5269ae959abb8d544ad378025cb8c0e66323ba081ab7ab954603c08251263162a67adac24712d59cc1a99b1667653309ef093b82df841c1

  • SSDEEP

    12288:Ensaz6hrdmMrkr8w8ha0PBJ8FSocI87mNsOep38370cQCuZ710:OsCEzkiwOMFSxNaeOe0wcCe

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2