Extracted

• • Target

    a16263d29f0baf03c98a07abf45075ce_JaffaCakes118

  • Size

    299KB

  • MD5

    a16263d29f0baf03c98a07abf45075ce

  • SHA1

    b3ef9f164cbb0223b0258a3eb498ba538c15aaef

  • SHA256

    92ad5c470a683171c46d3d5917c459540cfcac74287e037bc7744997e61f4ce1

  • SHA512

    c50012cadf6aacdeb0adda38ef171cd59659c27ef3e78b9a11275c24098cd1b13f9e634454d55cf95dc8d0cf5479901c8d155e688db8d8fefb72919c98765ad8

  • SSDEEP

    6144:MhfRiOnic88fItIX3Binn59KlkfPhfCSLjp:MhfRYl8QtyCnGmf7p

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2