MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8577d539f08c0151f39ae14b00f0c87d27da6fa49de660b2c67377b6cf0c0c8a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8577d539f08c0151f39ae14b00f0c87d27da6fa49de660b2c67377b6cf0c0c8a
SHA3-384 hash: 05b6f14a0f433c6acb3da104ec189d5a05dc7085891a7700991c580e900afa481aeffec6309655ab4c7875e12418574b
SHA1 hash: dce405ddfccd4226f3be83549c9951eab41849a1
MD5 hash: f966d3734e6f2f838349d0cd77e1f61f
humanhash: delta-massachusetts-november-delaware
File name:updtd-paymentcopy.xls.zip
Download: download sample
Signature Loki
Create hunting rule
File size:167'986 bytes
First seen:2020-05-22 05:47:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:RFhOe32zZf4zKo3rmGcVOeX6NKHKgVS1QEi4sPKF1AaG4ANag+wP:kHzZf4zKo3qIC6NP7finCSaxFwP
TLSH DEF31246BEBAE170EDE4EE2151F9814DD6D8641717A2ABD41E00824B3271FB8C67E9CC
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25511.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-05-22 06:35:36 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
29 of 48 (60.42%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 8577d539f08c0151f39ae14b00f0c87d27da6fa49de660b2c67377b6cf0c0c8a

(this sample)

Loki

Executable exe 2c47fd67c3768c03972a8883c7313a4c06445b0c1b92c286abc611820fa33580

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2c47fd67c3768c03972a8883c7313a4c06445b0c1b92c286abc611820fa33580
  
Dropping
MD5 a46f773ea9590ab7e9670b8834daaf76

Comments