Extracted

• • Target

    d4be209940b7ebb47a523cf5d84e997b_JaffaCakes118

  • Size

    276KB

  • MD5

    d4be209940b7ebb47a523cf5d84e997b

  • SHA1

    5c08f36e8ff15c1b5c9e030ec6bc8150f9563ff6

  • SHA256

    a31af388fa0b6bd50b3da1e5258e0ba6cd2b0bbec546f70a42952e0ebf6905b5

  • SHA512

    cd221509368f5bb007f8d181acaa6b9bc7759611e4cf86a91384285ae2c6dd92c47c4cb4e7e748379dad5c2fb68e6bcd42ef91c03976bc29e2471f0418a7d34a

  • SSDEEP

    3072:VIBnYYYYQC1meHtPyIBIOQcTRXr6hQPxUdt6V50BveDCUaPxrp931+wnL:VJumUtxBlghEUdtggeeUupP7

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2