Extracted

• • Target

    JaffaCakes118_79a172dbab552aecd0c1f779e2e2bcab

  • Size

    324KB

  • MD5

    79a172dbab552aecd0c1f779e2e2bcab

  • SHA1

    db3289c1eef193f7962342001edd4e03b6b0cdc3

  • SHA256

    d88133d7ec58fade6fc5791b8b1ff4fb4952cadf41da2e8082fc41bea5110da2

  • SHA512

    5c6b44098762ff7969b3be00b4da58fbab8f9c6cf5ace9b9f551bf9ca61dad54846cdfb024a9fcdc9993296a8d3fcf277c0cd5cc2145aad5569277311e941fae

  • SSDEEP

    6144:W34Ca/GvYdGoIbyDo85ThHxlesuGp2DGHN+7TyoHyhMB941Lwxf:WX+GwdGoI+s81tTuext+vyofB9WEx

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2