Extracted

• • Target

    92ddbbfb4cfc70cb8d61f7b1e1687cc8_JaffaCakes118

  • Size

    500KB

  • MD5

    92ddbbfb4cfc70cb8d61f7b1e1687cc8

  • SHA1

    9947a02e17d680b80711fd0ce8b38c8bdaa02cc1

  • SHA256

    d10761de0d9dc5f358f4e21b2da188f48b2e3b47a919f1d57c9535729007d096

  • SHA512

    84ec63794d05eb4f4c1188160a2e2b635af75932d87cffa8fb8bab1f05094840c02db4dd2b079ea02f57af6c6bc72567a5e58ef2c4cdff1f3cfe342a0e2d0109

  • SSDEEP

    3072:sWgfSNPG6VfYQ31hcZwwZiFvoMv6viCFXo11qeKqEBxZ7VgB:8YGocpixB6a4XS13Ru7Vg

  Score

  10^/10

  lokibotcollectionspywarestealertrojanupx

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2