Extracted

• • Target

    041c73bd4c470d02db20ef282a1a8550f8987e362cbd07fc3828c14873a7f772.exe

  • Size

    510KB

  • MD5

    27da3226cd4d9c5d77ff60f9663ea616

  • SHA1

    4361864077e17cc22cf9fed5133dbbf655b3f615

  • SHA256

    041c73bd4c470d02db20ef282a1a8550f8987e362cbd07fc3828c14873a7f772

  • SHA512

    24f877cc2c2b5674de8d1b03f713196ac9dd5c31524785b3f82a8472509050dc67a5ad6d70ccd813fa7bc22ffbf255bfdb7b25fe4cdacae72b8f67f21cf9ddfd

  • SSDEEP

    12288:VOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiVjt6URoWqrBbIOQa:Vq5TfcdHj4fmbEoW6BbEa

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojanupx

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Accesses Microsoft Outlook profiles

    collection

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2