Extracted

• • Target

    ae08b4c86b1327fc1c767e9a746b5b6d_JaffaCakes118

  • Size

    756KB

  • MD5

    ae08b4c86b1327fc1c767e9a746b5b6d

  • SHA1

    944240fa99d1af4a412575e1f91d353a67348564

  • SHA256

    80f5c8e7094a7fc305b06c743b8325a26f88da552e4b29dbf1f49fd970ffb6df

  • SHA512

    0ae1c2e65c222a67f6cb0de26ea1ba3832d432bb2d9448b27e0ea65bd2c3ce67b4009631f1540e69404e8a437e88c4f903d857b084d87a5d3a60e1ebc57dbb3d

  • SSDEEP

    12288:ccCyAG1e2GCW+LQaWWccDai+VtR55t4YEE07uJGI+dtxxS6lUjIlPnJtFQq9V33j:cG1es+GgVtR5LMAItflUjIlPnJtFQq9p

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2