Extracted

• • Target

    JaffaCakes118_1edc5ae8174533de1c038341b84685c5

  • Size

    426KB

  • MD5

    1edc5ae8174533de1c038341b84685c5

  • SHA1

    651a959c0e1052653d5e59836b856fe47b9b9ae7

  • SHA256

    ed2e98f8f8ec37bc3185c9f07a8d0595122fae501215977b3827868102470f4c

  • SHA512

    af32b72991f30818857edf7de409403d95f8fdb43559f1d954cf36a52b9bcbb933a805b8cf9d3518417d24e41990d25493acf80091a5eb29be23d4606ff94b12

  • SSDEEP

    6144:vGxhLpRI6hv9emJQN60HNUfWCnul/3oehlEiS1ZW8pjLJ:e0iQ60HNwnul/3oeMfpx

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2