Extracted

• • Target

    5cac41d44c296b2d6f0a48767d073b04_JaffaCakes118

  • Size

    500KB

  • MD5

    5cac41d44c296b2d6f0a48767d073b04

  • SHA1

    921e62a2a2b9b0a3a1f2f14546c4d4768e1cd82d

  • SHA256

    62c310a9aeec64bf3864411e0ea2edfdddbacb340626e7d808615ec35ec14d39

  • SHA512

    b175e5645db3dfdccb58524aafd5817de55b8c8e4d425ee35b176e3d1b3708995d404e56c731851d0d3b529acf2691d142ac820a9be5fe02957083947d971bf1

  • SSDEEP

    12288:1wQaTxjoTojucl3HAShA65ppMP1JT6YashlM0JT6YashlMkov:aQExWol3Ksbmn9ashlV9ashlBk

  Score

  10^/10

  lokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2