Extracted

• • Target

    e4f09c0fe74958f99bacbbee1ad95935_JaffaCakes118

  • Size

    475KB

  • MD5

    e4f09c0fe74958f99bacbbee1ad95935

  • SHA1

    baedcded81916113a3af1f9ca18bd42272897d68

  • SHA256

    2e0997482c43dd1fcc291a7e66bcfadcba3573a4befe1f0ec17122d453ddcebd

  • SHA512

    a61ccca7e28d7405f30622dc75aa215f16cd67db12397c49bad70f2bb9674545261d95984e60f8b80e0c5bd6d2d00ce1f61804ac8bf85321302839e179843419

  • SSDEEP

    6144:by1IA6z8De5YLU62thTHBl1Wm5lAxGqxFkkELeNgRkQdfFyDFvDLt1iiiiL8CVmR:biIA6gehThl1YxGIULeqR58RDtMsY5r

  Score

  10^/10

  lokibotcollectioncredential_accessdiscoveryspywarestealertrojan

  • Lokibot

    Lokibot is a Password and CryptoCoin Wallet Stealer.

    trojanspywarestealerlokibot

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2