Extracted

• • Target

    3b1ab1fa50b9475058dba40918216b40_JaffaCakes118

  • Size

    851KB

  • MD5

    3b1ab1fa50b9475058dba40918216b40

  • SHA1

    9a4a30c0f1565df386b476f55c27ae9fcb15ade6

  • SHA256

    4ef8b7089d21837f74af066be40110b30a9511f1a34ed054c7daf379858e5950

  • SHA512

    685d5a445812c8e81a67984972c02bd7c2dc7edd19b2819970d90a7ac9bff47509a3064b4e47b67ca655adfa838ff99bcbc20e4b36e348509df5565689e2d371

  • SSDEEP

    12288:6rP8HWnIZj7t6pvtdLO5wYIVqpbeQSi10NiWHK7zTzKbolS7F:682aj7tADGRI0fSPYrKboY

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2