Extracted

• • Target

    05f0e2ec52b9c451cd2aac4353663c78_JaffaCakes118

  • Size

    490KB

  • MD5

    05f0e2ec52b9c451cd2aac4353663c78

  • SHA1

    5a35330497b4ea1329cc75409432cad3a49105cf

  • SHA256

    d9817c00aa2cd8feb54b093b989c197cc7dd25ca1f1fb9dc1be52c34d0d91c4c

  • SHA512

    8b5b88655e55ba78e1dad98e5564a3b7ddc39328a443e2deaa7b975dd930297de3ce75258cede3ba4e002536ae1e5463bde8253cc58ea23756d2227a1451d4d0

  • SSDEEP

    6144:q926MFohvg6L6UqrlIw9aZ/C2WOEOX8f5TOQMIGfBnckyE1D1W+OJz921AsOjz:YhvsUIp2WLOMflO/I4BnckJNv0

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2