Extracted

• • Target

    QUOTE QUO252968 CONDUMEX VALLEJO 2YQOkxAL.exe

  • Size

    711KB

  • MD5

    0ddf7ac48f3abbd46aebf5a8034fdc99

  • SHA1

    d8664db6b118a89b28662a5da3977a2b73e568e8

  • SHA256

    004de56c87ec09f1022747d6713c26328397dec1a683f76aa178a48da776c82c

  • SHA512

    f9c3e1556f2a15db60172c8580129ac14459514c970b5c2c3cb7c4414bc7ff985d14a5966a3699bef78beb39f838c9510166f20658c6458211a17f3083f463a3

  • SSDEEP

    12288:BzSggsiSsjtsFgTrkOxWsj+s/WmdbA+V0mfMVd70aPprdL:BzlK/Tr/Usjr5A+bU0uxh

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2