Extracted

• • Target
    07553298f0f744325b03796d803f0add.exe
  • Size 243KB
  • SHA256 b09bb399af831a5f9a93c1d8cefc60f44446041efde040b69a9227a1c165f32d
  • MD5 07553298f0f744325b03796d803f0add
  • SHA1 4a42e55abbc0075dc206477c88317787a76661b4
  • SHA512 f941312b127c3b3da68b6a1edeb0f9024f57cb097bc15e5a502294643203ed7164aff55ed60d12d19acba963a06b09d892d126ffc696293f77cfacdbdd4fb383
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2