Extracted

• • Target

    f698a13e53453d0bb6e69bfba08dc6d1_JaffaCakes118

  • Size

    238KB

  • MD5

    f698a13e53453d0bb6e69bfba08dc6d1

  • SHA1

    0f3ec5b8e4fab4231b4eec0d0bf73bfd762761b5

  • SHA256

    615aeb4a6f7f475dd8b6efb28e2bed12628fc2769e7ebeea379ac1fd677e573c

  • SHA512

    f7d8002bd95505c2c45e285d4863014f9753ecbded3a581bc4526ad95a8ff430e874f7823c3609c55b894b4b23acda896abc90f18d7752bc368a87fcd9be02ba

  • SSDEEP

    6144:3FrStv01RyBjL5Sp+XWMaQMpZIALPTxo/qDy8NzLLEm:35StvuRyBjwpp/IClqX8Nf

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2