Extracted

• • Target

    6159ed4f47915237242632d32ab0d355_JaffaCakes118

  • Size

    709KB

  • MD5

    6159ed4f47915237242632d32ab0d355

  • SHA1

    2b7472865ef640c29862a63e9edc7c2e9936e1a8

  • SHA256

    5d20bd185df93a49cfe32513b44a521bae4aa7ede238b620ad9d29333f949387

  • SHA512

    bc33cb5f8f3186e59189650479a66a108b00b7a2fa658b0af31dc951120cec6386c82c14d7cad208789077f8e9340f9fbd45f41a7283f48550bddf79507f1ac9

  • SSDEEP

    12288:9jnzLMHK7zkUzAgYXmO351XOAUJ6Ep3E6PJ3orzrOxc4F59Ui:hz3ncmSFOtJ6mUckvOxcQ5a

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2