Extracted

• • Target

    e0bc0a61afd82400570debecdffd5bae_JaffaCakes118

  • Size

    1.9MB

  • MD5

    e0bc0a61afd82400570debecdffd5bae

  • SHA1

    69d5763f04ad6c91bdd0abe20a8582ce544ee368

  • SHA256

    a65d85716ba038a190d4ac6181248b0e0a539aacac94ac70303db2d24b86a2d7

  • SHA512

    e07afe479c9332c17bbc400e9cc579af7714a0be852b117206f7a0225e7c6310ddcfe75208edb557fc31fb05afc2cec869089f37151e2f0c79ca4a5a30677b2a

  • SSDEEP

    49152:a5b0HC4usjTWF4R+95b0HC4usjTWF4R+y:ah0HLuxh0HLuG

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2