Extracted

• • Target

    0e53a7d60c3fb8455634e9adb83ff3c5_JaffaCakes118

  • Size

    227KB

  • MD5

    0e53a7d60c3fb8455634e9adb83ff3c5

  • SHA1

    75a36f3f7fcb39870c51c0221543422b8b01ead3

  • SHA256

    a576c7f2ef99f454afdd5c93e22bfdcd0dcbe75c2bd909f37fed84226caaaa14

  • SHA512

    9aaecb5f73da2eed3e4d9d28c5dba426ffd35f6f75f93d2cb5fe0e1e37b22f9f224bccd72732ec1a1f245e767d17e3fd01a212fda146a22f542bd0888ef895ba

  • SSDEEP

    3072:M/e0Fl6GSFbCAXkH+aOHvoMmX5n3iyT/L4OZVAJ7m/LD8VLu/WJZWoYkaF7yNA:gl6PCAU8Fw5nSbOZVAJ7m/OnWoYkoGy

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2