Extracted

• • Target

    f146645165696c0a4a98eee0ce269b94a5cdc0620713fff0516eac5c6e60d1a3.exe

  • Size

    432KB

  • MD5

    22e773ce00e28960fe0b7c7ab94f0e3a

  • SHA1

    d7d5e7e5e955dd883355f8520a944e85bb2c6c55

  • SHA256

    f146645165696c0a4a98eee0ce269b94a5cdc0620713fff0516eac5c6e60d1a3

  • SHA512

    2be856cb6388d0e9dbfa2053868b88542a6d97f65928a4e0b9bfae422e048a44da08a03d59658f4af61358612cb6b39665593949ec11e5feab12a98cde0b0d8f

  • SSDEEP

    6144:fGxhLWR4Ie3veW1J/pVcHlqqiMRHwJK3WYuFsgEbq9KE8PY:OyMeW15p8eJK3WhyPWcG

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2