MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8266df6ed1b8fd3fcdb8bb61d40eb33a087738b35c7b212ef26067f7669fd76d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8266df6ed1b8fd3fcdb8bb61d40eb33a087738b35c7b212ef26067f7669fd76d
SHA3-384 hash: 6795dafa12d48f7e67be30265afde329e128e2cd205b67a84ee028fdc02e680d70a50c9e4ea38c1680faca9017c13930
SHA1 hash: bb556ea38e300c0d01f8b6d4cb3ea4333e094aea
MD5 hash: ca78647915c291937ae3576b141dd69f
humanhash: zebra-yankee-tennis-failed
File name:copy-20017432_pdf.gz
Download: download sample
Signature Loki
Create hunting rule
File size:357'061 bytes
First seen:2020-07-08 08:03:19 UTC
Last seen:2020-07-08 10:25:35 UTC
File type: zip
MIME type:application/zip
ssdeep 6144:dbH4XeYaBu0nLmL9lw4uAariM+llFyuzalAs510dRimIoIB0ICBdqWPumxWh0Ka5:dbaTaBDqlo5n+lHysaCa1CiFoA26WtxD
TLSH FA742372C250BF8B8BB7077E40E93C6E73D46DD818D94B2DA7552AB7C228C44661CE27
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
2
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8266df6ed1b8fd3fcdb8bb61d40eb33a087738b35c7b212ef26067f7669fd76d/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-08 08:05:04 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qjtn63wrxd6t7tnyxnq5idvthiehooftlr5sclxsmbt7ozu725wq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 8266df6ed1b8fd3fcdb8bb61d40eb33a087738b35c7b212ef26067f7669fd76d

(this sample)

Loki

Executable exe cdbb658f897d454ca8c7a8a71da0b51f36f679f913814f514d6d4b5de6a29004

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cdbb658f897d454ca8c7a8a71da0b51f36f679f913814f514d6d4b5de6a29004
  
Dropping
MD5 c19c75a75eab426252e73fe5b6afd05d

Comments