Extracted

• • Target

    874def67e0a37db6863ceca1e97ca3943a792207315063d1c2e33c6a51b74200.exe

  • Size

    373KB

  • MD5

    dbd7eb70f73bdbfc916a14d5d41cf16f

  • SHA1

    1f484673fec0c53cfaca1ef8826659d39c1d34bd

  • SHA256

    874def67e0a37db6863ceca1e97ca3943a792207315063d1c2e33c6a51b74200

  • SHA512

    3230152974609afb25d1f64af54f714654a1e40e5ed97b2724ca62423e7c19a5f373261bea2a550462159597efd1b2959f70aa0c15fcfc45aeb2b8bfbd818855

  • SSDEEP

    6144:s6Uqd2GhNgc9bLrEnjDpyxpRq5tnsmOWYbl38Jd:9Ui2iNv9bLi4xezsmgbl3od

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2