Extracted

• • Target

    ccc08c61998de26aef10c20540c0f20f_JaffaCakes118

  • Size

    104KB

  • MD5

    ccc08c61998de26aef10c20540c0f20f

  • SHA1

    163a5b3e56a861042d7d16bc1e55e07018e10c9b

  • SHA256

    d6d0e79f08a400f82ceca5c42add0261966b77983492fbacf745625e4ba9f086

  • SHA512

    323363becff596da9c143b53dae9cf25740ef2b2cf731d088bbac8a387e28e8b83253c559ddf8a098d9178a6cf52b5bdc0dffe70f203a5ea9f386f2e19281d66

  • SSDEEP

    1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqKIzmdj:nSHIG6mQwGmfOQd8YhY0/E7UGj

  Score

  10^/10

  lokibotcollectioncredential_accessspywarestealertrojandiscovery

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2