Extracted

• • Target

    3f5181601f1914ee282321cbba9008a6_JaffaCakes118

  • Size

    617KB

  • MD5

    3f5181601f1914ee282321cbba9008a6

  • SHA1

    7b3c287d3fbf0e709f18d7e1b246a0e5051face8

  • SHA256

    892c936fee4f23475dffceb94f8f2546613218d131f82d0daa87202411e8e27c

  • SHA512

    73572db4a4eaaa7591368c4df5e1fd5cd29cdeb611c3f8a2d0219c0c5f2fd1c6b75247995ca473a52bc9cddf78ea486c022a38030b7d1e086636b9185f90fd7b

  • SSDEEP

    12288:XS56bQ+X8+UiDLbRHahAUqApScqhxkrLIDvHf2hkI2v1hCR0:pbQ+X8+UiDLbRHahAUhAxvrdpD

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2