Extracted

• • Target

    6f32723b4121cc669ef520e0504fd5fcd41b875ca6fae89fc97f312b585a0027

  • Size

    1.9MB

  • MD5

    cd659067233f8c39700456980aadd8cc

  • SHA1

    d85100c2f7d9ebff411914d44e7b23629c53efbb

  • SHA256

    6f32723b4121cc669ef520e0504fd5fcd41b875ca6fae89fc97f312b585a0027

  • SHA512

    d3786d7b68ffcbdc2cb212fed087ad343b7f09b621ba4f9e6cc10f1d028ca95152f964ee9b11dafccb1074dfe7cc5740735d70e2563f973c5d4bebbf191a0cc7

  • SSDEEP

    49152:IR6VITmhtzrOvaH68BUeVq7god13c8SMsiB5vQOR6+OQfq4xOhMn:U60mhtzrWaH68BUeo13c8SMsiB9xOhMn

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2