Extracted

• • Target

    feKIyfpdldOh6iN.exe

  • Size

    586KB

  • MD5

    65715e10ea8ea3f0944fa0d4f7769266

  • SHA1

    e99fb439022d9c2ad1102ee67c624211b8131eb2

  • SHA256

    a6ebe80f6fefcf709347f986ff5c913d0be43d98b693f18c363a2d4293d5c17a

  • SHA512

    a797402c5ff58bf214c50243bdefe4c3f25be779766f19c02d459e654c695e66abbd1fb64470515374f47f05827ade29db8d1d4f5028bdfb91ed9efeb18a0913

  • SSDEEP

    12288:52ehxTgVSQvHt3H4aN/KOj8ncPHHg1qJOwyRtiQQ7:5nnMVSQfBH4alT

  Score

  10^/10

  discoverylokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2