Extracted

• • Target

    2ab705e4887e148c8f090a275e5200ca_JaffaCakes118

  • Size

    832KB

  • MD5

    2ab705e4887e148c8f090a275e5200ca

  • SHA1

    255f1f8bee0f0561a07d5c806898eba081646c3d

  • SHA256

    c4b7287b0bb9ecfc2f4d2fb4dcb39452bb13714398dcff0cddc3ae4a673dae0b

  • SHA512

    dccfa693633ae9bfc2aac5971566c8f819b01dc296e9df16a1ec8d654e9b6abc07ab0d3f3298d9a1be86046319b82514138c6d136c8023c55f9e69b370d73e77

  • SSDEEP

    12288:IR7Js9Es6Tpn+lGgkgd1CMKozWTf75ccVYLMbv2zlHK7zRzKbolL7F:07JsSs6TpOGP09KfjYuezoxKboH

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2