Extracted

• • Target

    a4679d7335c18da7e3b042fefbb09262_JaffaCakes118

  • Size

    1.3MB

  • MD5

    a4679d7335c18da7e3b042fefbb09262

  • SHA1

    460ad21c1cd86441f227e51f3a0e218edca4c6c3

  • SHA256

    ac4a470326858948bd6e8d28e2d8b0751b3b0ff61e882501bec8e434714d9a3e

  • SHA512

    88f4c422fbf40873c45b1588ee76d70f85622efe54d86658f8a0bc230cb53c2f1b828d1163c1ecc8c2921921182533b27e932b3f227d64b9c32095b9989ff4bf

  • SSDEEP

    12288:bPGWmKBB98drWJg7+SS+agl54ZGLaJDSgAzT2fXQk/HmUVpJ03EVinI:bPZmKXqrAyxaglKKaJDSgAzT2fXQvOF

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2