Extracted

• • Target

    d58b55c8069135398b11e1e99713027f_JaffaCakes118

  • Size

    657KB

  • MD5

    d58b55c8069135398b11e1e99713027f

  • SHA1

    71bbbe72fb1844dcb274681557356130073df806

  • SHA256

    72f90bb830d4070d56a0cf97046e38c897ee8b959f9d4a00640f2ab00b98345d

  • SHA512

    5b46fb7f3aee7b0099b4830110a94b4a0d59810204c344e313ad3b5d6fa76ee9379fc6aa7586d858d7591184dd4efd27c13dd96a53fdcabb47642995336daffe

  • SSDEEP

    6144:mcAIR/NXHWRX2BhvbBIsUftp+MLPQr1LrFmnglxlSOKmuf1lnVdkMBub2nUb/NrW:UCbfUpFLPWRrFUgl/KPgb4LX

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2