Extracted

• • Target

    c041930be6fe678e436a22f084a0a76c_JaffaCakes118

  • Size

    660KB

  • MD5

    c041930be6fe678e436a22f084a0a76c

  • SHA1

    9a2b95f8992d939f7c95fda9123d73c6364fc4e7

  • SHA256

    92c6ded00269dbee7f8d2238c73f15f676e88c198ac2a7fb1dc0cc2e3721b4a8

  • SHA512

    8d0258adc63f077047d04ef15d02077badd734fdf42a81798d8536358f88daabf4a725ba3859f830fbde0da9df710abb9497fbab0018377b8d6d0ac5384e3ae9

  • SSDEEP

    12288:b1eRRAfxCIUnyNOI/SN/HWQZUpWeLgCV4JSo70l:5iRO8nyNOI0u7tMzop

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2