Extracted

• • Target
    b5df0ab0de773f92f0325da7fa6b6ad7.exe
  • Size 494KB
  • SHA256 467f56bac6833fd37c3008e275c85a43352a3bc9712e803e7ebef5d86a47ce47
  • MD5 b5df0ab0de773f92f0325da7fa6b6ad7
  • SHA1 042b83f1b60a620ab94324ec0e8bff09a69cb6d4
  • SHA512 e18532a4f1af63fd8341839bb9189a1873e3d940dc5a0c109897a2166fcfbb5252ba512d36a8297be667acf5b9f8e31d9c5eb871f247bfa415fabcfd99183077
  • MD5 SHA1 SHA512

  Score

  10^/10

  lokibotcollectionspywarestealersuricatatrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • suricata: ET MALWARE LokiBot Checkin

    suricata: ET MALWARE LokiBot Checkin

    suricata

  • suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata: ET MALWARE LokiBot User-Agent (Charon/Inferno)

    suricata

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2