Extracted

• • Target

    f5463dbb6131a4c2643af3700f14095b_JaffaCakes118

  • Size

    1.2MB

  • MD5

    f5463dbb6131a4c2643af3700f14095b

  • SHA1

    d86b9d0f3368d2df164bc9889bf9a69722f3e2d9

  • SHA256

    2ef3221076c6f142a5b1bc116f74e22af2fbaf5b873f312355debf57e80291c7

  • SHA512

    4a83fd483a7d58306583512a66d4bf539ddbbf4c160b0a1ddc99bf2657c8b6a501d7f61566eda48be772c6ea8d792e8e05dd89461900e2dee5d42a98c38330f7

  • SSDEEP

    24576:u+cx76DOYfx8Dgyfx8DgZ7Xul8MOPrClnHWZINwDZ9SL:Ax76958Dgy58DgRXi8HP22ZICZs

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2