Extracted

• • Target

    c4c73039521f6ecefab523665520a4a3_JaffaCakes118

  • Size

    104KB

  • MD5

    c4c73039521f6ecefab523665520a4a3

  • SHA1

    e786464252a1154ded9dee2fd17a48cf14fcd7ef

  • SHA256

    fe90665c786d89a1f7ea3551239938811d87926cc6bb0edfc6a2baa9e24e3225

  • SHA512

    d16d2cbd3b3062918298db1748325a83b250e77f293f2e7bb3c675e44a3c599c335c1a1a6022c02ef9f87e5b8a4dd1516f9e2c0eaa11035d67a397713d851b21

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

  Score

  10^/10

  lokibotcollectioncredential_accessspywarestealertrojandiscovery

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2