Extracted

• • Target

    dadea0829b9b5f1c2beab21414771929_JaffaCakes118

  • Size

    242KB

  • MD5

    dadea0829b9b5f1c2beab21414771929

  • SHA1

    ed3fa918c6905f3e96faf72c694fac491ae0ac4b

  • SHA256

    ca155beb7d28cde5147eba7907c453d433b7675ba1830e87d5a4e409b5b912e1

  • SHA512

    813d7337893901eda8f3743b55d6b36c4552b2ae245995734ac6972fbc9e846e60094b5b4c87a9d73428e8167440914c9a78e766635bcd8deb409fd7f848adc9

  • SSDEEP

    6144:kYQ71eEcr8qzc8zj4t+IYemYgjEPY4xPlHdiHWS4KbGjx5Gi:ktQEcr9zcG8t+W2jERpliWCKx5Gi

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2