Extracted

• • Target

    7339ad196bd6ed99f485cded42b8718a_JaffaCakes118

  • Size

    204KB

  • MD5

    7339ad196bd6ed99f485cded42b8718a

  • SHA1

    a3f8cd6be5bc764ef33489ec5903eab1e371e888

  • SHA256

    a22bb90f740e1dfd0640d07d0700029b10f91da92dc7abb1d3f8d66543cafdb6

  • SHA512

    1c0eea6c590b80edeaff64c83b73ea8213ba0e56717ea11d889bbb5cb994d385218045799828b93989990815b6412dea22c32a6cc28b48c6353162c0966c7cce

  • SSDEEP

    3072:KspDFFcV+Nq/6DHAr0obxWbbxnTzwGU2/eF9hd7:KGFM+NqEHArJ6nnJHi9h

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2