Extracted

• • Target

    JaffaCakes118_0929fb7f0a76cd563c16ba1b3303dcb4

  • Size

    372KB

  • MD5

    0929fb7f0a76cd563c16ba1b3303dcb4

  • SHA1

    f6f59694512fae49eab172778ef51ee4877afd61

  • SHA256

    2447eb9572ac10a9daacaad16bf8f4f922041849c0a570cdeb8724ea9285aac6

  • SHA512

    ea9c51541cf56bc7e8539191f6869fd4e1d670a8cf9d8c1dcc4695f6cd53dc6fae42a03e4c480acc5ffe6749ccafab66d5dc41ece08dca806f32b0500b507c48

  • SSDEEP

    6144:36Uqd2GhNEDnLwOYw8fVZjJ/i05YrVr9cJKmi+KwPLMjXX8te2FQ1067:KUi2iNEDnLwOYwYbjdi05aJIa+KUA8Ar

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2