Extracted

• • Target

    f05124fcdd4dbcdede0e398fcce85ee9_JaffaCakes118

  • Size

    893KB

  • MD5

    f05124fcdd4dbcdede0e398fcce85ee9

  • SHA1

    5f83804885626447baacb9edc388c114a1d0faf1

  • SHA256

    0e20f3d09159e9617d92f6363e80ef28d929e975deaa2883bd98b5956eb17708

  • SHA512

    1128ff0f96386c911e53114bb66077576cd8fbeabec112eb53954b7cc4b06ed2bc88a6d1529a0ba04233fa9d3458d408e21713eaf774977d7d1856f944fc6a7d

  • SSDEEP

    12288:1fZDmaEJbjJEKdqcMSFWRZ0eeLrfRE9EnprNZMS9dOZ5UP83GUTCDc9F3nC0Py3x:9ZDwqV3RZ0e6YYrNZ+W83G

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2