Extracted

• • Target

    JaffaCakes118_43040c5411616eb26e97dd9beac0a329

  • Size

    433KB

  • MD5

    43040c5411616eb26e97dd9beac0a329

  • SHA1

    a6cffd44ad077c925975958e92bfb9058d02eaa2

  • SHA256

    bf51512f62d8c050db7a0c5eb40c7c252fc01185f0ea6accf0a92a92e398b62f

  • SHA512

    8cd860a5a110df011da507d0513ad3d7bccfc6895ca3506a62b04f08c0ce6ddaf97eaede2acc78336147e82c0e482e210224058b74004448ce98d7c9cc4855db

  • SSDEEP

    6144:qGxhL+IB/vGCLP4R01wE2WgQdpfa9wLrI3RHOo/+:j5ZfTw05HVwaqEoG

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2