Extracted

• • Target

    799191ea836a408a42ae3b862c2d70d5_JaffaCakes118

  • Size

    1.3MB

  • MD5

    799191ea836a408a42ae3b862c2d70d5

  • SHA1

    549efd44b70faed73547c3c25e08a35db013142f

  • SHA256

    5ce550bcadb51ab5fdacf108a47611b90b40c7aed736244b130b04560dc3a5e6

  • SHA512

    b865b15d004566d4ffcf8881afaee9560568e60cd7fa00a31f0a09d51763d17970e687a6a2e3573f59b6ed49bd06fcb29de30f29d62be835ae26f8aa99354e1f

  • SSDEEP

    12288:dAsX95800y5HxIStyndgEize3ssiQNgHmKa9bpwa2YdhW2rvBpZ5524EXJ:dHpl5HxIPP8uKHipwtIg0f29

  Score

  10^/10

  lokibotcollectionpersistencespywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2