Extracted

• • Target

    4ace7d70c2194b333a38939b731806bf_JaffaCakes118

  • Size

    783KB

  • MD5

    4ace7d70c2194b333a38939b731806bf

  • SHA1

    892378a52887b0da4033b46a4cf965e072f1aa06

  • SHA256

    f101dc9c3b91bd16d74bee44a0936499377ba996ef7f8f6e5d982d985f12da4a

  • SHA512

    5f191827c380e8acf4b476fefd80ddbcd54b55af6e0f7f96d504a490efdb61ded877e77e8499a61ad48f7183d9e0a31de1a5cdebab3f7cd0da39a9f60fed2244

  • SSDEEP

    24576:UavzvJ9HV8sY5ocz8RDf/7HFpgZE9/C/yKEfkH:UabfHS8RD4IS

  Score

  10^/10

  lokibotcollectionpersistencespywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2