Extracted

• • Target

    a7abd55975a6b86bf79fc28fbf437f5b14af6ab93239b27c63d4734b762dbe82.exe

  • Size

    366KB

  • MD5

    7fa15ee74a969e32055f7fb18fb51008

  • SHA1

    7103829b1874346595c127b86fc8ed36ab826188

  • SHA256

    a7abd55975a6b86bf79fc28fbf437f5b14af6ab93239b27c63d4734b762dbe82

  • SHA512

    ebb0739efac03303767d5823e1bac10d50520466b91f3d17e1a654a2afeb47c90c768f9835ae236786ca68bb0ebd7154029a5b58365198db90366f5613589688

  • SSDEEP

    6144:u6Uqd2GhNjRcmNtmnLlHqpVXbbjno+5hV5VXJA8DylJsDWKWHSHr:bUi2iNNcwtmJHqpVXbvnoA88WaWZ2r

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2