Extracted

• • Target

    381b23e37f4796acf00d4fc162763272_JaffaCakes118

  • Size

    653KB

  • MD5

    381b23e37f4796acf00d4fc162763272

  • SHA1

    1f3ff15f16062aafc9ceb4897f83be235128a661

  • SHA256

    9437675a3e6078f83ef366414aa370a7436d016df18b334800bb28d89ddd1565

  • SHA512

    52cf78f28b79ca4ab0e83d18c2185c47e290e10f391280e37e96608d790c19f27e6b2b1bf95d7b06a8b6e2bee0697b07440d1b3ea0cecd0090b369f479e92958

  • SSDEEP

    12288:hMztHK7zjcJ+6Z5jC7WiXsP013dSJOoZ33FFD:mzAPa+6ZVCqmNNAOe7D

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2