Extracted

• • Target

    0f1bde8e151531aed752a337fcd392ab70e2839a42c4d61570b825fa44d4d365.exe

  • Size

    540KB

  • MD5

    90f4be8876c29b8a1003fad8cc920a82

  • SHA1

    9954083d7206592481ad16804d2d230d052550f4

  • SHA256

    0f1bde8e151531aed752a337fcd392ab70e2839a42c4d61570b825fa44d4d365

  • SHA512

    8f8e29b2e4df6099a4fc2b03f562f6e6deb1071e45f54a300b331f994dfcf845bf2f2edae8217e6dcd728c8c23611387a3acbcef5aaeb4ff3a8d4955ada865c3

  • SSDEEP

    12288:qxTUip/R3pX12nXGik/+oPrj5utJfS5bpZKh5tsd5Nrkkz:LWR3x1Wg9PNrkkz

  Score

  10^/10

  discoverylokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2