Extracted

• • Target

    upadted_pdf.exe

  • Size

    587KB

  • MD5

    0124d93385c8a6398f72daa6997f49c8

  • SHA1

    e7f35def5e9134813f98b08fe72f2f79869fece8

  • SHA256

    e6185bd50b78a2280181337e32864577d4650b7923eb64e8e95f85d46be4ced0

  • SHA512

    b7cc786494ea1d8bb53d842daec4e61b63aa46618693c044b690454e129c4adaf4a6640d94f15fd248e20d32ca904e5dff025c1756148e88e5c4db687fa0bf9e

  • SSDEEP

    12288:ZsT8i8L8WM+QF6M4fWr+cvT6zbejd1PAn+OxwAIoYjPXzxAnugq:+oRXoEJBboIn+Oxw3xbXNmHq

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2