Extracted

• • Target

    489d60af14c516d7b4f712272b1a2803988385e197a5883431d58f7694f22f20.exe

  • Size

    729KB

  • MD5

    d37211304bd22d903a20bc47efab5623

  • SHA1

    8493feb645e619c76f1f58301526dffcb7f3bf35

  • SHA256

    489d60af14c516d7b4f712272b1a2803988385e197a5883431d58f7694f22f20

  • SHA512

    7bee52fbf55ff1e87a7b3ee8b3b59bb0c29f8c019001c02c512d9d011b188647a93b5f915e22d2d47bb8b200c60afa871c4c18c7e5179c9a8933e74adff02982

  • SSDEEP

    12288:GQFpNPB3j3GTyWXV7Orct7qXxz+jmuPM7qSgFcjVhs2ADntXf9nn5+GT:JFbQxOAtWKs7umRhs2Ajt1b

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2