Extracted

• • Target

    f769e91b05ea8c5cd73c26b2c047fb50_JaffaCakes118

  • Size

    325KB

  • MD5

    f769e91b05ea8c5cd73c26b2c047fb50

  • SHA1

    3585995af6b82149cbc2b190207b441f528d505c

  • SHA256

    9149dc6a1571916bf7077d6bed5b4758613b5a4cba36349dfd3433e1bbafae5e

  • SHA512

    fd6b2cf8c5fe5badddfc9b0b01d107a1360925fd411fc11d05d1a55a8efa35c6d397e549f71dba0f9693d4fca208644720b84d266c3d702b7a5a7ea5491024e4

  • SSDEEP

    6144:cYdctSOvIaXXPsZxbNSSofCluJUskeDMgazqvk:pitS8XXMffzu0eDGq

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2