Extracted

• • Target
    http://files.catbox.moe/ws4k7r.ps1

  Score

  10^/10

  collectiondiscoveryexecutionlokibotransomwarespywarestealertrojan

  • Family: Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Accesses Microsoft Outlook profiles

    collection

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1