MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 76a32e00645963b6a592586cfe316364ee357f396c558700526340abb848f50d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 76a32e00645963b6a592586cfe316364ee357f396c558700526340abb848f50d
SHA3-384 hash: 28e5fcc114ee904f35e2392fafe1cc7b6db2bd2565c18e4e39c5ad40da028f0041a679cf1c0b9be2996dec546f361f94
SHA1 hash: d9d9e9e18abac0578b48ee68158c5e0ff8d0b9af
MD5 hash: 0fb47ebeaca8ecf18660c875f4ec108e
humanhash: beer-snake-cat-spring
File name:MV XING HAO HAI_pdf.arj
Download: download sample
Signature Loki
Create hunting rule
File size:1'060'678 bytes
First seen:2020-05-20 06:09:05 UTC
Last seen:Never
File type: arj
MIME type:application/x-rar
ssdeep 24576:z6hbcoqbLfT60f0t/k6FbHOTxZZUcROACo9WsQQVudnPk7:WhQoq37cTHOT3t2dnc7
TLSH 1D35337EB0B612B29F5F927D218699A5BF35F9CDF823B95A0A61913F28DC103C0725D0
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27382.Rar5Heur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Script-AutoIt.Trojan.Kgxtqx
Create hunting rule
Status:
Malicious
First seen:
2020-05-20 01:22:07 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
22 of 48 (45.83%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=o2rs4adelfr3njmslbwp4mldmtxdk7zznrkyoacsmnakxoci6ugq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

arj 76a32e00645963b6a592586cfe316364ee357f396c558700526340abb848f50d

(this sample)

Loki

Executable exe 5625ea6f376b65782c1966f90f22541b813af26b6074f6ddf0e4a2f682bdee5c

  
Dropped by
Loki
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5625ea6f376b65782c1966f90f22541b813af26b6074f6ddf0e4a2f682bdee5c
  
Dropping
MD5 a8f5372603378d5459eb6839731ca513

Comments