Extracted

• • Target

    3583cd2774effc1c278f5551a357ae72_JaffaCakes118

  • Size

    501KB

  • MD5

    3583cd2774effc1c278f5551a357ae72

  • SHA1

    d7d362f69eaa257314fb5efba4d3f38348ff6b53

  • SHA256

    e26e975b1d56759debdfddd1ae9824eb5286480aa6874070de6d9647a1373f40

  • SHA512

    a25f1117313c7d8d88e7dbfeb33fa9f3249b2d1b00994ecbb4d7233891adf2969186a4043745e7600e90e9633a60f7a380afb6ae071d8e7accfbbb7c00f3e61d

  • SSDEEP

    12288:ST5oKRxAYY/r9ZdK4IUz5cGhtRCQJT6YashlM0JT6YashlM:s5vxAYcrHdu8V59ashlV9ashl

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2