MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9833120840cbe39c073edb659eea9d4c08b72b4835fedfaa7606fc7fd3b2af9e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9833120840cbe39c073edb659eea9d4c08b72b4835fedfaa7606fc7fd3b2af9e
SHA3-384 hash: 07e70b23719680f0dd55cb7d99b9869b2259207dfe289575751863a4e64cddcfcd04fd1ad1a6611cacff22c4516fb59a
SHA1 hash: a861e9474f34731dbb77a5a31dd5163a9435966f
MD5 hash: ed2d83e3cb47096445ee67164f6df65e
humanhash: finch-carpet-illinois-oklahoma
File name:OP.ace
Download: download sample
Signature Loki
Create hunting rule
File size:299'893 bytes
First seen:2020-06-17 06:57:29 UTC
Last seen:2020-06-17 10:50:33 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:rWF6wq8wuZz9/DfQdH0kWASfJFuWOKkOiZY1xtu4sY2kczamPcUWG9Bm1H:JqPffQdH0bA2FuZOi4j1sRYmPcUWdt
TLSH 4254233E61F3894601BE47E1B0B3F5C5191E5BCB367EF226CE1355EE463A2E14860EA4
Reporter cocaman
Tags:ace Loki


Avatar
cocaman
Malicious email
From: financiar <juridic@timcj.ro>
Received: from fmail.timcj.ro (fmail.timcj.ro [109.102.99.195])
Date: Wed, 17 Jun 2020 13:14:00 +0300
Subject: =?UTF-8?B?Rlc6IFByacSXbWltYXM=?=
Attachment: OP.ace

Intelligence

File Origin
# of uploads :
3
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-06-17 06:59:03 UTC
File Type:
Binary (Archive)
Extracted files:
78
AV detection:
19 of 47 (40.43%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

ace 9833120840cbe39c073edb659eea9d4c08b72b4835fedfaa7606fc7fd3b2af9e

(this sample)

Loki

Executable exe 5c63c2887891a56e0465251c8112ce7a07fc70e782dbc2e80f45f670294d4285

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5c63c2887891a56e0465251c8112ce7a07fc70e782dbc2e80f45f670294d4285
  
Dropping
Loki

Comments