Extracted

• • Target

    JaffaCakes118_04903d0a9314c3a92fa42fb88e88b7fd

  • Size

    614KB

  • MD5

    04903d0a9314c3a92fa42fb88e88b7fd

  • SHA1

    12ed047bc81459792fdbc8c16bc91fdd3a32df02

  • SHA256

    137fcdfb8f41337b01321e186b35a1dfd83cf9de85aaa0c3e72d60a1134b9e16

  • SHA512

    2a5b3fb4c5c364a5ea75d83789c30f3fd3dc78c23f1cad7e4932678fbc7feb73c8b8989336fd5473fadf7f1b0e9b04811edebf05b863b08cb01e586bc782a1cd

  • SSDEEP

    12288:ErplpzDGW4187Y0XorCRaeYwKPLCV34wDRnN+q8SaAaieiE0RCdG:ErplUlOYcYMwxI

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2