Extracted

• • Target

    JaffaCakes118_3750954d333d5af9c39566cb574580ea

  • Size

    404KB

  • MD5

    3750954d333d5af9c39566cb574580ea

  • SHA1

    d6d7760846187f518aae46f3e3e9ca6387a59ac5

  • SHA256

    9ebc9d5b090a94f877575bdcdf4982c65942d4f08cef716c35aac27b88f28c81

  • SHA512

    d58ca6970fbf6867a6475eda0e44b86345a5c9ca12ba83fae5afbb2514ff81be42622cc000c9f1a968ca93bedb76e602441b24c0a9e7dd78df7775a5e1460659

  • SSDEEP

    6144:im8DAwnHo1q6Uqd2GhN5fbLsPDAWf0VdajpG771KCiZwv1:imOIXUi2iNRLsPDd0jaF41Kxw

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2