Extracted

• • Target

    177d57510fc53694f024c276d3173cc1ee7d4997038a2.exe

  • Size

    381KB

  • MD5

    2def95f27b211db3c3998f796c98c830

  • SHA1

    3f796c6d4eeda8aa797585ae06ecc906b8162941

  • SHA256

    177d57510fc53694f024c276d3173cc1ee7d4997038a25931526c592e400c666

  • SHA512

    d650ae1736a8adb7eb4278062f68fefe17717bb193492b2bc455e8b14d6baae590683cd26c602e28e59d123b4124032688bc2df4ef4c662e5a4f3dbbaae69ff6

  • SSDEEP

    6144:/OJc4YmkQQ+oOGe2UDmomunR/Qf8WIzzg9DwhfbXrbDNTF5E+leakwna1fXZeFmv:zNUGe2UDm4YyiM9D335E+lePwna1xI61

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2