Extracted

• • Target
    c7381f53aae8af38e0878fd55fd4233a
  • Size 281KB
  • SHA256 037a4ae072c70cade6ca101962abd2ebf156642b04a43a182ad39868397a5fae
  • MD5 c7381f53aae8af38e0878fd55fd4233a
  • SHA1 2092ee6ad345d1c8308c71591b8199487139c90e
  • SHA512 c202da7b66ca625997fdfd57cb5d0fd3e689acec6220fe8299bbb09345b3a1fc7c2507cd2c4fa01de703ab19977ae38a04692207af46f30aa662dc357fd1235f
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2