Extracted

• • Target

    df4d6780bdeac7cef2ac001885c9cdd5_JaffaCakes118

  • Size

    239KB

  • MD5

    df4d6780bdeac7cef2ac001885c9cdd5

  • SHA1

    0b9d5b150288939f76e5493ca99e688753404bd8

  • SHA256

    ec484a7c4eeef16d3277cad798a5b408b7f50fa0c8b4d7f1b81cb2083db2886c

  • SHA512

    943d3c35e3e39d663233e4c2051ebf2605a048d135e3ebeea3f16d42ae9cc4ee9e19f30fff1ac4dee75451e7cc88628a2dde171841bb8f7f218bc4e9dcfa69f1

  • SSDEEP

    6144:MKZ7a8ORKixm27YQdxDBtlngZSu0BUy7bCY:t7a8OKid7JdZJn8Jy7bCY

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2