Extracted

• • Target

    92d43aeef52434103c853c3a7e242a78_JaffaCakes118

  • Size

    396KB

  • MD5

    92d43aeef52434103c853c3a7e242a78

  • SHA1

    8895f726bac0c27f608e6545578bf403e705514f

  • SHA256

    6d45cc875e834c44f4cd84d31f04acba5be8247fbefd8536ffb3d5358604270c

  • SHA512

    4a4299d5423b22e3920eebed2d7e5109a9cc04523dd52bfcf227e848cca655a8a7c844673989024352993e167846d371595b6eddcc7991c0d73a9acf0da74f6e

  • SSDEEP

    6144:oMmo3xXKLWQy+C5Ui+U88PFCNiGfzn8Prp1QjFmSz5/vcIvzOOPMtKy3kiLwaE6:oMmEXKrWuxGFCfj1pfH7vz5MtKyTwa

  Score

  10^/10

  lokibotcollectionspywarestealertrojanupx

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2