Extracted

• • Target

    7ffe7389453925a4df3c1d74ecc56529_JaffaCakes118

  • Size

    803KB

  • MD5

    7ffe7389453925a4df3c1d74ecc56529

  • SHA1

    82805927086f3697cf05bd80fa33be813142931a

  • SHA256

    b747ea836f1596cfe6d361bcfde80fc7008bcad74fa66712c3e57772b9a9b95b

  • SHA512

    1c3def464cefbdc3fa703686cba28f79e0b8c34abff0e1b6ab0b17c1a94f80f15f122d9cb0324ac189aed47c8542cbeba8474f461c5a2e856235ce2263a44340

  • SSDEEP

    12288:Wb6mCM9sXHh9BoRPqsxOVKuS5r70xwgeqh043L97/hOOP4v2IjtVDiy:neSHhYRRxOVGcxJBdb1tP4v2Ijtt/

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2