Extracted

• • Target

    9568c0d01e18776fe76cd6e8b269666d_JaffaCakes118

  • Size

    519KB

  • MD5

    9568c0d01e18776fe76cd6e8b269666d

  • SHA1

    8e0b1b887167f8522fb050659685471db1c56b7a

  • SHA256

    31d2d46288e99c3c702b3302bb061c0cab77612e7ff9e5488bbd1e9099760be1

  • SHA512

    8d80a7a4772094f0d681c9908c6bd1777afc7889db1d5a1373992203f1add4f50e8fafa0fe3b0437ca5fd985fccfc037cd1785337098d3a7140f91da859ef259

  • SSDEEP

    12288:aMmrEMRPt1beVXvUuT0BT86aPnIpRiuLvgJMj1xrOUwwk:u/PtkUqAH5LvgijXk

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2