Extracted

• • Target

    f0cb70544eb71fd9054d9d475ab44633_JaffaCakes118

  • Size

    227KB

  • MD5

    f0cb70544eb71fd9054d9d475ab44633

  • SHA1

    810edb5a89026c9f3d6090dcb07e64e8cafdee50

  • SHA256

    a62490b7606b8b4da18bf697605bcd7f7297cad0b220900e364e1755c0852cd1

  • SHA512

    674c8b13b1fdcc4792ed02358edf2f9472f13692fb9d31f4ecf484426685427b7e1fce3b29e332fdc234e28d8974d6fd5b0de9a993804a7555115a0959702225

  • SSDEEP

    6144:yc1FwB8FXgtD+xC4SwCMSk3fCDPOsoWP04d:y5B8F4NN8S2yO2s4d

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2