Extracted

• • Target

    c557a5fc570645a3b9361339ca58205c_JaffaCakes118

  • Size

    660KB

  • MD5

    c557a5fc570645a3b9361339ca58205c

  • SHA1

    2c6b9b3fe7c4dd21f9305006f972b2788fe5617f

  • SHA256

    1bc133e40e453e4104be815ea7e980d1f47b9941fff5e3ec668d9d0b096fa841

  • SHA512

    7b790eb2968d4f9eab4fa67af7ef2a78691446d862c29ccad3aff1d1c096ee6a4656ab9fb2b946bcef59fbf1417105d90d0e59440ff06c63f7fbec13542bab70

  • SSDEEP

    12288:b1eRRAfxCIUnyNOI/SN/HWQZUpOIn6v6J7M:5iRO8nyNOI0u7AIn6Sm

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2