Extracted

• • Target

    fce02d5ae70e73ef9e8d23fbc58c4796_JaffaCakes118

  • Size

    547KB

  • MD5

    fce02d5ae70e73ef9e8d23fbc58c4796

  • SHA1

    ee387ebd9710923fd37b16366c009848013701d4

  • SHA256

    1264a71074a9c7b6e582a466b7b2d6c0fbfd6e04212a72bf75349b7c6e1b43c4

  • SHA512

    8a317f6f9d9b9ac41766e1b28381ab84c0cb0e14a438210db1b7f6b822e2bf3c433737d9cc597c74c20fcde5e3706981faebc10f6c1e777563cd138fcee011a6

  • SSDEEP

    12288:e43a5aXblplsKlfMcSYqbXu+tWmn+wzVCHxVEOMjtVv4:e43oMhsKlfMcS0

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2