Extracted

• • Target

    b3690132e90a12ed78b6938026650c06_JaffaCakes118

  • Size

    548KB

  • MD5

    b3690132e90a12ed78b6938026650c06

  • SHA1

    366805bd005f28cbf8fc5e60bcdac47c19d451b9

  • SHA256

    63e68b293dfeb12309b4f814f2ffbdf0af7908d181c0e2c8f8c83f5af1ec7844

  • SHA512

    3c64b2eb7d2bd9a04ef9f5e68cd84c413359c1585f7040929c992388889aec98df37538930038951e9e4514f8de5f66553027f41c60c26beaa4a9461add33133

  • SSDEEP

    12288:QWB7drk5Tc1COmuIayu3otTYIHHVhu1qX:Nrk5Tc6uhyu4dvBX

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2