Extracted

• • Target

    JaffaCakes118_939580a7f4148b93d390b055e51eb224

  • Size

    373KB

  • MD5

    939580a7f4148b93d390b055e51eb224

  • SHA1

    e7d5d1a14bd9e66c5fc9c756364e0c6b660151e6

  • SHA256

    bfd85e23edeff064a09bba65f2f2f23ab652aeb613c42b61c91de50f791dd5ea

  • SHA512

    537eee1a92680e52158b58e48938442d4b966aa37f1ec14d7968558ae82f57f00dafb25b8e46c893f78c7ecbdd0d3b36e4477d21c4b31b7e424443e38fdd73b9

  • SSDEEP

    6144:r6Uqd2GhNNqhtkeplw5Pr17r9q0QSlPHfZvvFd2zLq29EdInfO8:OUi2iN8keplwh1nYqRHb2qvuR

  Score

  10^/10

  lokibotcollectiondiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Lokibot family

    lokibot

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2