Extracted

• • Target

    14f826d46b68f5ae27c5412f91ebe30f_JaffaCakes118

  • Size

    430KB

  • MD5

    14f826d46b68f5ae27c5412f91ebe30f

  • SHA1

    b353f6ef48f9a31e16e574354ececf93b420f620

  • SHA256

    cfc279a1aff94416dc823c74fc2562d64317aa48024bd3dfdf93162aada24be5

  • SHA512

    834b6e764bda8323ac2997260418792b4464ff3f48b94a8bc5dcacaf77a35434f54b0137c826f69c84fc8d8e8b084635b8ad23ed2aeb877cea89c48131250e42

  • SSDEEP

    6144:TajEkaIL+67Wv87cU2i7oBPK0IzqgPioaF/YHdWHpjWw3E3UAmLuRg8Y:+jtucP2i7EPKlqUS/wWlWwx87

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2