Extracted

• • Target

    rPO_28102400.exe

  • Size

    589KB

  • MD5

    5b32b5fe0f3951bc2e461920ec122e82

  • SHA1

    29dcc718a1faed5e8cc9ec8757709bf2617ad614

  • SHA256

    481d35dd2f799eae40ecf9965a7c41b2aec41770260870199f2188fb728e49c6

  • SHA512

    da8c559b711d431603bb8c162d96d90c5cb2a23ac16343b9e15bda605e8237544f4fb1cedf10d81feb1fdbe52db554bb1970a48ebc7b3efb1d84b301c457f23c

  • SSDEEP

    12288:s9ELrageAlkOnJhgBP1iCHvW4bFFfqI94j76x:/FnbgK8+4ZFfqIqK

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2