Extracted

• • Target

    f8913afa39b5bd5229bc21253d49e81e_JaffaCakes118

  • Size

    519KB

  • MD5

    f8913afa39b5bd5229bc21253d49e81e

  • SHA1

    c970c064e411a05caf454ddeb80c51f5fbafe573

  • SHA256

    19c06b0fe5871725c10e5b0b1c09d945d2289876a68aef6fd818e34ba5f195e2

  • SHA512

    58355d90d364942e21083d9c1ed74a92b46dcce824daa252afd289401d718e4733baa5e8052dd9e187ad16a81f62a3b91ba669e68041c975905bf4ca1ec111cb

  • SSDEEP

    12288:i7mcy5bbCs0t0Eir1u2WFORMzfte/UODTQqxW9pQFglbaMz:iHKEir1aORMzFhz9iglJz

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2