Extracted

• • Target

    e23b6a4a3f9a691aa57140829b735dec_JaffaCakes118

  • Size

    389KB

  • MD5

    e23b6a4a3f9a691aa57140829b735dec

  • SHA1

    b3c8ae5a874edee651364aa876822dd4f334e7ae

  • SHA256

    650d7fdcda7e9fd5e63dbf129286101684f74824062e13dede5c6812c58cfe43

  • SHA512

    a2ba559420885f969889bf970e37fd2d00da0f4cfeea9ae85ea7a0c1bb1431ef5c1d25a8c94443c92fcadedd8f7ff485a8cc9d84051cc54eb0db7fe0e2e7f2bd

  • SSDEEP

    3072:WYmct0HIParaYwR18hNGmNsulHtbeNB0kD2Urx0L0ktMal5RJduMPZXzx:Qct00iqRu3NGD0k6Urxq9zdvPZXzx

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2