Extracted

• • Target

    73258aa0171e762efa0567481df6d2db_JaffaCakes118

  • Size

    1.4MB

  • MD5

    73258aa0171e762efa0567481df6d2db

  • SHA1

    4f09e9f0c82a85c474f39e67b6e7f8cf9a399cdd

  • SHA256

    c448169380e81c58f9468dfc7ffe85622b8e01d1b1b9cb66dabb7be265cd5306

  • SHA512

    07939b2977bdc0bf9b065a478c4e24cc88bcaa7375e1aec9e3582ca6ff94f2ddfe09a0dce19a30995211d88754fd55b6e167f9d8a2629cdb857fdebe8e3a026c

  • SSDEEP

    12288:EVeC5d9qk6jHghIt2oqKB5Puwiq0ua1yixAxg0y4Q6H+Uy1Susr8MmH3jC:o7q/jAhO2oqKB5PuhuWyixAsZZS5R0

  Score

  10^/10

  discoverylokibotcollectionspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2