MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 52c8cc9e35be2940f06f256124545fd8ec4dea2bb59c31b0e5202de866389442. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Loki


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 52c8cc9e35be2940f06f256124545fd8ec4dea2bb59c31b0e5202de866389442
SHA3-384 hash: 684def9ca989278f0927efce9e8b2f00f1a589e2c7e258a86cc7941085b4209b24a5e8ccd76ef359ae2cae08eeb77bc6
SHA1 hash: f0c5cf1fc058c5badbe4878f9c68d8e2720a47bd
MD5 hash: f106807dbccfb55306f4695b165292aa
humanhash: colorado-connecticut-six-mexico
File name:MHK_20200727_081521002_pdf.gz
Download: download sample
Signature Loki
File size:283'874 bytes
First seen:2020-07-28 07:12:52 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:PUyN0juliBgnZ/1mLoi8xZ7VZ038ecwP8Cca:rijulYLoL7s38jW8O
TLSH 2654236DB49E26E24D2CC11C59DD7C10E620A5F6026B7F117681ECD5CEC891EAFF089B
Reporter jarumlus
Tags:Loki

Intelligence


File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-07-27 00:59:08 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 52c8cc9e35be2940f06f256124545fd8ec4dea2bb59c31b0e5202de866389442

(this sample)

  
Dropped by
Loki
  
Delivery method
Distributed via e-mail attachment

Comments