Extracted

• • Target

    892070dc1b4c37a5be9de966e0e815e0_JaffaCakes118

  • Size

    392KB

  • MD5

    892070dc1b4c37a5be9de966e0e815e0

  • SHA1

    26955a242e19b15e31ad129b061c617ea7805c82

  • SHA256

    3961c447ef9ad90373dd2f41a964f4484044baf6aa5d6fe2fada359b50763302

  • SHA512

    6aa56a2556b4eb7a36ce51d2f1aff57317b8ae87b9eb78168d2c6c093bcaa1503599112e7400adeda7d5af7c7623ff5a9031f27f9447584c4aa5afbd0f1a17d1

  • SSDEEP

    3072:2tvl0Wi4zKwRz2NzzMQZNIm/us/XEuSwZtnVxuW23VXC3BnKVXTLQXXrfF+DyfoJ:+zGJ/jNSgV4WQVXCdXrf+WeH6xx

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2