Extracted

• • Target

    42f87d3df6143cfa4de2965e2ea0d38d_JaffaCakes118

  • Size

    302KB

  • MD5

    42f87d3df6143cfa4de2965e2ea0d38d

  • SHA1

    b41e898f0342665d5d47a9bb68b7c55e1f1f16e1

  • SHA256

    a2c3e585be7f3cd577cb394e9cb7205c6c495ef3605be040b6becc147313a0d9

  • SHA512

    d8a4f646fdc748bd363fe6c578ec54ddda364517c5f9f6c40f8e25f81d8bef372702d652a635e1af646e24195f9df69e489f981b5b89297792b32e282bf669e5

  • SSDEEP

    6144:QDqZNjBqguq/ZNPPExJBSi2Rci/bgsWVFrol+zn45pinu4pmOrwG:GqZNUy/jPP643g3zxnJpmOrw

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2