MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 6cc2c8246f8921fb8856cd2933f94bf9a6f96f5610c32071814c40c442105e65. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Loki
Vendor detections: 4
| SHA256 hash: | 6cc2c8246f8921fb8856cd2933f94bf9a6f96f5610c32071814c40c442105e65 |
|---|---|
| SHA3-384 hash: | 22b2c8b1001b049c2a5a7c216793635818e9d0e4e6b07c81c03b9150440d95e489edd7748c7df2f11acb4d8ce3a0c3bf |
| SHA1 hash: | afffc154a0c39720942ca2e7f9b904366f7e67ba |
| MD5 hash: | bd1deca99c32c73df8ad33474acdd73d |
| humanhash: | low-fanta-two-cardinal |
| File name: | RFQYNn5K5QSlowVwHt -xlsx.gz |
| Download: | download sample |
| Signature | Loki |
| File size: | 227'608 bytes |
| First seen: | 2020-08-21 11:43:06 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 3072:1fBRePdwpubcAbWoYVRZkR6O6BWvmU7BAuWY3sFUA6AeiB2ylaq/14yYMEF0VL/E:HREygdUVRbOIWJCuWYhA63i4KzYMEFWc |
| TLSH | CC2423775C18A303D7B9F3533D9A82A1FF41A842D19CD733AC0645EA28649C505AB6BF |
| Reporter |  GovCERT_CH |
| Tags: | Loki |
Intelligence
File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-08-20 15:50:27 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Farheyt
Score:
0.80
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
Loki
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.