Extracted

• • Target

    f1272def7191a1a6b55812433f94fca51c6a175d8ffbc5f057dd210706b73b9e

  • Size

    502KB

  • MD5

    7cd57e830b3044f5bb4c9400580de3e8

  • SHA1

    f5f51efbb507004e1f778bf61e802cd4fba77244

  • SHA256

    f1272def7191a1a6b55812433f94fca51c6a175d8ffbc5f057dd210706b73b9e

  • SHA512

    1231901e804a7108fa85b196ea93a3f4811398ef850aa24cca38fa3749a0ab2bcf4016507841363cc59fffe4cd4adb3e379901530ba94c2dade6c4957b2e03ea

  • SSDEEP

    12288:hcf0BGVfesoK1rppYKipx01RHveGMj3Z3C+Pr96MzkR:hcbB/HpYKYx+HveG831r967

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2