Extracted

• • Target
    d5dfc0531135352d201fc40d31fd0ad5
  • Size 349KB
  • SHA256 fdb88bdd898c3ac5007a304e11e0277ff10554ddeaff6c65bb0f031b58f0c423
  • MD5 d5dfc0531135352d201fc40d31fd0ad5
  • SHA1 59b0c35156d715aa70039036c12168dd63f679d2
  • SHA512 7a77ec91b71fadc51de9251a515d8249c9e37474ebbaafb8d8b13f8117e762fcf29c89cc9e09e87b09256b5a88f1c2073c5629e26667e35fccf0d917413a5b82
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2