Extracted

• • Target

    971105834c1396764e165e3d60a17dc5_JaffaCakes118

  • Size

    815KB

  • MD5

    971105834c1396764e165e3d60a17dc5

  • SHA1

    2c76e99fa43f8edfacdebf55372ceea7948b0f6a

  • SHA256

    14364f53431c5dbd27149d1d035ade72501d168f3d400a3ece11345a7c7056dd

  • SHA512

    67b9f724ed53673ec56b2de2394dfcc78e99d48be944f02db00212035fd7729a73a086a11f4f1c101f96d7bc43107873653ec51166fc130f643fe176db7e68fd

  • SSDEEP

    12288:zOKAn3qGaNHEyC9/oR9gy5FHK7zRbOSr1kTkHFWgHLoY+KPx2ilp9dfC+hs:zOKAPp9AR95yVbtrygFNVDlRfDS

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2