Extracted

• • Target

    6ecc82c2ba384129c19d83312baa7ccff19011a013b16f2459b29865484bfcab.exe

  • Size

    306KB

  • MD5

    8896e46cdf15e1dae71e64d61464b8d2

  • SHA1

    f64c70192d830dce8daca2531662521bc7439af0

  • SHA256

    6ecc82c2ba384129c19d83312baa7ccff19011a013b16f2459b29865484bfcab

  • SHA512

    41716d412655fb55188e5ddb1a3e5517a2205c7bff49a3b98fc277b1a56a763a9009779787e8f0ba7c3265e4b05cf48c101b1ae0523f99e9296c9616bdf11b96

  • SSDEEP

    6144:SeMIFObW3MII7uCLrKdDeISzOau+7ntkrcvEmG4ioNNtjcBdb7iK/q3I4:SI/B0ogwKgmTioNNtgj7D4

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2