Extracted

• • Target

    Captura de Pantalla de PAGO.exe

  • Size

    270KB

  • MD5

    a1216d9e560ed575fda74320c11ab0c0

  • SHA1

    70f9dc47d10b1e17f2aeb8674ebfd6a27994c029

  • SHA256

    f550ae8df9a698d769027c93e0be6be30800ec26344c803ce6d43d955202a8f1

  • SHA512

    eb6bf6332f1e6cd8c2f4874ac38f710a8f4a49395576ff4d39b2393d579d3d18d706d969319a8dfa102815bd4f2c5754af132f140b9b019a54c71db3c468a374

  • SSDEEP

    6144:sX0U9G+g6cEUDN8XpwWRgYCTO4lPAn+aqbUcY/ldtlDUJVWZA:EI+gIUupwWxCTZl4ngYHn/A

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2