Extracted

• • Target

    176b04c0ae63ea99ba0ab6414f52576c_JaffaCakes118

  • Size

    315KB

  • MD5

    176b04c0ae63ea99ba0ab6414f52576c

  • SHA1

    ac8232cfdf82235a8d4b0984c215c9567bea6322

  • SHA256

    750733fd4c90de2a0003bd6bbc410f61bfc88f1a2b70e6d8846a937b8372807a

  • SHA512

    3a091732ecd94fa3062cc8040f7cb46f13adc1b25dcf12a9b28faf9112d03e3bab44aca94e77c5a432a30984f8607170b9fedc2fb831253f27327c1855e03266

  • SSDEEP

    6144:PZ9vJIpht5cWfs0CKRCITb20o9kWswgR7QqVjcWvCT3dVUJ:PfvJvCs0CKEITbASd/V7CT37G

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2