Extracted

• • Target

    a5b4e1ca469fbdbbb9ce84ad653dcb94b5c0d6069bdc90a42053d454cfc671c7.exe

  • Size

    306KB

  • MD5

    1481ff174e43122b240c1183e26c1fd1

  • SHA1

    8089cbcf55182f5d5a9426325e080020b2493f7c

  • SHA256

    a5b4e1ca469fbdbbb9ce84ad653dcb94b5c0d6069bdc90a42053d454cfc671c7

  • SHA512

    c5f25e8b26342c933bde72685547ff347d94ef00f69fc66a3ed21e5df7f3add314a827b88071d431bfa71340cce74f6a1e33b41402b06f1e0868a1b3c7801f68

  • SSDEEP

    6144:5eMIFObW3MII7uCLrKdDeISzOau+7ntkrcvEmG4ioNNtjcBdb7iImq3I4:nI/B0ogwKgmTioNNtgj7C4

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2