Extracted

• • Target

    f5c9cd3effcafc0746d5b1b997829794_JaffaCakes118

  • Size

    243KB

  • MD5

    f5c9cd3effcafc0746d5b1b997829794

  • SHA1

    da9309a40034c8edd48873d63febe8e5f07ae179

  • SHA256

    7378348862e752850264984acef7fa776b6333bd9a770b60d787ba1675d89ece

  • SHA512

    1bec6845298970f4f8b78c084d4ca344a7bc5e1450b448dd789bda3ce65c15ef650be1497d0f2a31299032b03e7d76c3bdd3f699bff8438bd70d106515af8c66

  • SSDEEP

    6144:43bgCRhNAYxfaeX90hYzxopVztW2mzcuSGm9ihu75D:4E0f9X/xopvWKuW9L7R

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2