Extracted

• • Target

    c75c6ef87851e8b0315423bf42e2229d_JaffaCakes118

  • Size

    1.6MB

  • MD5

    c75c6ef87851e8b0315423bf42e2229d

  • SHA1

    12fb08be74665169a16241b455e3b5fd7a0de98e

  • SHA256

    947d3a57e2298d5397ae2be09bae6f1e5878af2a9f50d3f00fbfbcc9d701c4ad

  • SHA512

    6f266f23c470db07b0a3a34becfdaf8509242834ea80baeb4c4b6d7d44d83e559db44e0e737b2ced4a5e7fd7ca217ccf67f8507b0cbd4e664ccf6489cc88cbfe

  • SSDEEP

    12288:BlD24swK9scS6i9CZpEK2i6/xsXymXBCjmjRPTjRPyjBjjijBjBjBjBjLjC/tN5k:/p69sDCLod/xn8Bc1NyRbStWfuD954T

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2