Extracted

• • Target

    9f14c4323c01ad75029e91cb023ed4af_JaffaCakes118

  • Size

    765KB

  • MD5

    9f14c4323c01ad75029e91cb023ed4af

  • SHA1

    0846d6135692695a8b1095f5d83b816bd232ed50

  • SHA256

    e1d8af1fd15692cc43b0b9dc08a7cb48ca6132afeb25f4e0d1206ef5c109c513

  • SHA512

    47eec4ef5d758e733d875a3d1d47a04c9af86d525c043b005df415bedb89b81a261683b06c27b04c54ba6eb29c8a57bc54cee796c9697f7e86058ccd7f7a5def

  • SSDEEP

    12288:wyBDbpjP6eP9ILXKutyfu4IrfJISGki701DxyrbufX9BwpGHMl:wyBDdjP6+IuM4IrfJIEA01VyufM0sl

  Score

  10^/10

  discoverylokibotcollectioncredential_accessspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2