Extracted

• • Target

    5d9d045489e48f1dab516376fe9d5a45_JaffaCakes118

  • Size

    772KB

  • MD5

    5d9d045489e48f1dab516376fe9d5a45

  • SHA1

    202c80d9984865b50dbd4b94e82f23967cc99ff1

  • SHA256

    ccc928a1ecdb56f04e2bb3890cc6ae8662464f9b4e641cefef9e18c059d66b93

  • SHA512

    54fc53b22552c691204fd5c9d00bb519147b441b40403126ad8b5f08d2147e0d82f81407bfdcb7223ca47f56b394729451340b5633981349bb2ca9ab402205bd

  • SSDEEP

    12288:nnS4ESg/HK7z0oLYWW4xXcoPCZQTRbdbJCyH8/DKaxiTkGf52ki4pWIYycYIUx3L:0S34yzxMudVCyHSDrakGf7

  Score

  10^/10

  discoverylokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2