Extracted

• • Target

    f0aa504227c9970ab17bd03b8adfafc5_JaffaCakes118

  • Size

    236KB

  • MD5

    f0aa504227c9970ab17bd03b8adfafc5

  • SHA1

    c654db6285cf31312248e9965a806733a7a73c0e

  • SHA256

    312c2beeed3d70bec149f1897cb10bd3a07e54ea32ba0bb6a84b69820e5e72a7

  • SHA512

    409b2ae2dead2bee7f92eff1693c62b7e88e464c341891fff18795d15cb55a6b5cc8016efb1307f3264edb10873fbdf791c2f423448fcd0be6054e2a0ba2139b

  • SSDEEP

    6144:RaEUGMMH4wAeZ9qnwh/eN6z8CdDYbHFaWBghup:R624wH9rn0cWB

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2