Extracted

• • Target

    5a9a9697bf56bcc169d2d4efe3432643_JaffaCakes118

  • Size

    658KB

  • MD5

    5a9a9697bf56bcc169d2d4efe3432643

  • SHA1

    0238ada1e93d13acdbc3eb70761d96fe7389979a

  • SHA256

    d499c370bd7f71654bf747f61084a20067c5bc58d16cbdb6329a0a4864489998

  • SHA512

    e04111e67491c53575fc767edfdc0b92bcfb1f3fb239bceed9e358d2c63c182a178e3d3a0a90809f6c7a6b28f97b78d271292be1e2aff0aff0ea8bb26d3a886b

  • SSDEEP

    6144:DSmiqRKHKeiucYvXZP2rgo6hHyA5+pm5F5qfxW+mka9cXNIwt7tpWseWcp/Fmo6w:DPBwKep+rgRNyA55IxJJGcHobZ5TT

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2