Extracted

• • Target

    5483f1f6747c896b2d6c9cf3a1927134_JaffaCakes118

  • Size

    239KB

  • MD5

    5483f1f6747c896b2d6c9cf3a1927134

  • SHA1

    9eead6068e8e374de2c94a44ab81ba0162ae4594

  • SHA256

    97747db97d3020ab4d1a110e84b46b47c6a62936c73e2a7236fd8e8a4bcb46bd

  • SHA512

    7c7f3fc249acb7491d4fa708be7637be23d6e30b9ef730180f380803c608dc640370a2f93525f2eb7aff8cab383dfd3e2fe412a42b43aaee4cb2ed02e3e20451

  • SSDEEP

    6144:sLtc+05VBHbOUtrFwQ1Obxe9Gkv3zTf6jxayve7+Z0Pj:gc7VJbVtrF9ObNgyvw+Zaj

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2