Overview

overview

10

Static

static

3

cb325322e3...18.exe

windows7-x64

10

cb325322e3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb325322e35bed35b9299137224d0cef_JaffaCakes118

  • Size

    104KB

  • Sample

    240830-tstlestgrq

  • MD5

    cb325322e35bed35b9299137224d0cef

  • SHA1

    0ebd50de7e17f693f74794e54c2e872eeb0e8faa

  • SHA256

    3c4d1563358e51939a849e0e3f4f4cebbe4d29b2eec481783706cb61847986ce

  • SHA512

    fb28178880b16fc460f55175eb6890c1542aaa43a5d3b89d289a9e224bd3331b9ecbc59cafad45584a37d1a601a56bdeabcb5accd7433bafd4b93cce4db94a47

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

Score
10/10
lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      cb325322e35bed35b9299137224d0cef_JaffaCakes118

    • Size

      104KB

    • MD5

      cb325322e35bed35b9299137224d0cef

    • SHA1

      0ebd50de7e17f693f74794e54c2e872eeb0e8faa

    • SHA256

      3c4d1563358e51939a849e0e3f4f4cebbe4d29b2eec481783706cb61847986ce

    • SHA512

      fb28178880b16fc460f55175eb6890c1542aaa43a5d3b89d289a9e224bd3331b9ecbc59cafad45584a37d1a601a56bdeabcb5accd7433bafd4b93cce4db94a47

    • SSDEEP

      1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG

    Score
    10/10
    lokibotcollectioncredential_accessspywarestealertrojandiscovery

    • Lokibot

      Lokibot is a Password and CryptoCoin Wallet Stealer.

      trojanspywarestealerlokibot

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks