Extracted

• • Target

    e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c

  • Size

    431KB

  • MD5

    537c29506f84fcfd64015acdeb60f453

  • SHA1

    19a76518c74c651bbec4db7f7f80620172927738

  • SHA256

    e16dcf7fa238eec4d12be8f742b6cc6f14f090351db7bb963a3e313991e32f1c

  • SHA512

    b42b31b8523a837f4a7a2f67f7dbe630085d403af2060e0b01f83c2eb8baed74d1eefc5f8eb40ec88f38460e25520f927ecb985abdc7662e6f12d597895b1b90

  • SSDEEP

    6144:Tdj7gD05mQ/kQNac4hhCuN+gm0qj8TCCtqxJZ+GLfHZ1yJ0OBfIQ:F/5T4NLm0w8T/kJZ+Kjo3Bf

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2