Extracted

• • Target

    514e2771207cd146d0aaacebf15f8cf6_JaffaCakes118

  • Size

    226KB

  • MD5

    514e2771207cd146d0aaacebf15f8cf6

  • SHA1

    c67bc182541878077c0059b009611dbbec82f78c

  • SHA256

    9f66135d831d5ba4972ba5db9e0fd4515dfaecc92013a741679d6cddbe29ab25

  • SHA512

    5e3b83ed64ad6272a4522c6746bcebc61d51ee0fc8754b6b369471516d602f11a1e86361d75f61f6e3c872a3d09651247f9ecff6e8716be593b5e24a3945b3d0

  • SSDEEP

    3072:yTPx22c5QpFrHu+5bZDvO927Kvj+/0vHUXcx65V95/h72mIx0x4qhEkvfpXMyVRb:yM2cm7rOY1yCL3Mx6T/FsEJnywPV

  Score

  10^/10

  discoverylokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2