Extracted

• • Target

    New Order.exe

  • Size

    538KB

  • MD5

    fed5b3d1972774645a11685a33140e28

  • SHA1

    c9ea3cdc9f537fe50088c07c239c69dea4456ddc

  • SHA256

    15582393b01b6c64d16d7c573cec24dc00954c1faede0dc69777a1caa9757f7d

  • SHA512

    5682fcc7f55a8915dceeda6ce0b6cb60f993987c2631c7b4024d6afc78cd94cc345561e59ac15df2fe9511a92736ef387354f703287ac1326d9da694ee269680

  • SSDEEP

    12288:V9BvctM85t35JPNJj2WzoRLQYRYzmYcwbzbpFMQWaJZpQEB52oSwc3:VD0tM85tbNJjldeYiYpi+so1c3

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojanupx

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Accesses Microsoft Outlook profiles

    collection

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2