Extracted

• • Target

    1bdeaf5f156dee50dd1df32b67bd7c42e40c518f11b5d308b66dca5f29106579.exe

  • Size

    404KB

  • MD5

    bd94a739f5689450bda65382967d1ae1

  • SHA1

    8dd0679f0961f781973355fcf64b465d1883b68a

  • SHA256

    1bdeaf5f156dee50dd1df32b67bd7c42e40c518f11b5d308b66dca5f29106579

  • SHA512

    78d5d60be6cc173bbb98cabe374e449539a23010bc3fb43bd245d37efa183ed7a54134d0f24c294fca2fb638bfeb4da73bbedfc28e5bae00bd3e143c6bc4bd53

  • SSDEEP

    6144:im8DAwnHo1q6Uqd2GhN5fbLsPDAWf0VdajpG771KCiZwv1W:imOIXUi2iNRLsPDd0jaF41KxwQ

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2