Extracted

• • Target

    Nota di consegna_TVX507CX.exe

  • Size

    511KB

  • MD5

    f5bce1fb7e37976dc8df996ca761fc2f

  • SHA1

    effbcd4236d87bc08fd6335b2152551fedcb91eb

  • SHA256

    ed0854c940f926f1e0fffedbb7932712a8abe8f23900d1cc27db06c1699221c7

  • SHA512

    2f4ad3fe4a216fc6834362938b7f8510353b94b32d6c5d2f88569a61fb8c491211dee6029157aa22d17ad398308f9f89900e3f437950f9c96bcd09627f65aafa

  • SSDEEP

    12288:yk4xGbsp05fYveHK+0J/Rw1vvnumvY7/8qsT4mP:ykIQvHbwEnntY7/FsT4Q

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2