Extracted

• • Target

    329693bf1fce73c334b98dedce191db1_JaffaCakes118

  • Size

    369KB

  • MD5

    329693bf1fce73c334b98dedce191db1

  • SHA1

    ddbe13525a6643bc94249079cbd66c00f41235b2

  • SHA256

    9b83e59783b63981f9f85b2939e038531deb96457d91d5d8debc93f396a15272

  • SHA512

    68f54967b9cb5d202e5865aecb27e126419ad88d81483323421b5aafcc5d6d487c6e226230ae16514f1e0ab9e54096a4c4679c75435ae722da8af1ea5ca15d75

  • SSDEEP

    6144:1Tz+HNEq6x2VsOV2tL82F+a6944un6jvgD00B4pC035Ko0TZCjmRx:FyHyx2VsO2L82Qa697un4oBMJKlCSx

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2