Extracted

• • Target

    2b326b2abdfd2dfee14c8b392a7c361d_JaffaCakes118

  • Size

    794KB

  • MD5

    2b326b2abdfd2dfee14c8b392a7c361d

  • SHA1

    868d0f6a4016e39e0a2396f14e1918964483cbd5

  • SHA256

    b61fbf292115599e5715c9a9fcbbb8b8f6cf630f3f98485f736a4ea70fdb53f1

  • SHA512

    3606a0efab406ef9a3dfc99e5d8e1bc9e8c2b3960f822934f8a1a1afcd9138b45fcd2d75cbf2572c1405052e8fa253845e651ca123bdf93534720ecdac3fda2a

  • SSDEEP

    12288:E+rKqcoHK7zYv4yVMDhcBJIZ2qsNJId2aFzdWH42vSPyzB+ZgPIJkb:Hdw0v48M52LYN2vWyzB+yQqb

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2