MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 16c86796e354f4632efa86ce09ed63c0ae23c993a405febd5b6f8e869afe43b4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 16c86796e354f4632efa86ce09ed63c0ae23c993a405febd5b6f8e869afe43b4
SHA3-384 hash: 2275044982a5ca80e9166e4f70aa320d24bf932e775efaf2129b1ff4eac9f6a8b24980edaa1b7df51f40b8bfa90b8e31
SHA1 hash: 6b760a9e53cd3feccfb8717a2aaa95cce75ed53a
MD5 hash: 66560c68f81cc140a28e497a40f68697
humanhash: avocado-tennessee-double-pip
File name:SHIPMENT DOC,INV+BL 062022.ace
Download: download sample
Signature Loki
Create hunting rule
File size:161'446 bytes
First seen:2020-06-23 05:25:17 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 3072:yg2FlnyzF7sq1keNZvJpmgkZ8FdGxFnckm2lpVp6cS:yg27nyFIdeNhJp3kZy6KkDXRS
TLSH 08F313AA20731C7E4FF915E0763A5F384873461A5B40EC8A81C0372C76772595A8F7F2
Reporter cocaman
Tags:ace


Avatar
cocaman
Malicious email
From: DHL EXPRESS SERVICE <noreply@biz-manage.info>
Received: from biz-manage.info (unknown [178.124.131.183])
Date: Mon, 22 Jun 2020 23:22:05 -0400 (EDT)
Subject: Fwd: DHL Shipment Prealert Arrival Notification!!!
Attachment: SHIPMENT DOC,INV+BL 062022.ace

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/16c86796e354f4632efa86ce09ed63c0ae23c993a405febd5b6f8e869afe43b4/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 05:27:04 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

ace 16c86796e354f4632efa86ce09ed63c0ae23c993a405febd5b6f8e869afe43b4

(this sample)

Loki

Executable exe 1f304045d47cee09337e90918d6e57c52e45b18d8d773b93b1a8505a4780dd08

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1f304045d47cee09337e90918d6e57c52e45b18d8d773b93b1a8505a4780dd08

Comments