Extracted

• • Target

    6b6a06788c5b7db9f36a04e04652ddb3_JaffaCakes118

  • Size

    490KB

  • MD5

    6b6a06788c5b7db9f36a04e04652ddb3

  • SHA1

    fcd8f8157a524cafeb3349922bbaae12d22ef455

  • SHA256

    04aea9d8b5b86bc420053fcf400eef6a9eb60cfcc1a1f230c51b7c89b2cf1d42

  • SHA512

    3af0116ba74e5c00b486088f9bffd6a4872b1d1744341f646d222c4b722e30eeb7405e42da1334288afc9a2b01042ad97598a242227b46251d099b7f02bd5aa1

  • SSDEEP

    3072:jWgfSNPG6VfYQ31hcN64Fcsp6LcqZZ0fam6gKWv4Boj2guLkCY:hYGocN64yspeZZwamNjjfuL

  Score

  10^/10

  lokibotcollectionspywarestealertrojanupx

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2