MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2fa379a6aa2289a1802e364dc940f38bde30aa6096376e901926c16a822eb591. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2fa379a6aa2289a1802e364dc940f38bde30aa6096376e901926c16a822eb591
SHA3-384 hash: 09fea80d6543d8a9570fee45e25937b014be9ac2f0775d717e7278511fac0faf0c8fa0090eaadda056a4a353b6e69cba
SHA1 hash: 66336741af2298be6d30ad68a10034cda0f4075e
MD5 hash: 176d62682de45ffa920eb0d8c01b0303
humanhash: whiskey-ceiling-lithium-burger
File name:Docs-Scan011105_pdf.arj
Download: download sample
Signature Loki
Create hunting rule
File size:370'238 bytes
First seen:2020-06-02 05:50:05 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:7qmoroVjCJPiueS2YuzvSNJ/i3T1rAQXIq//rpcioMpyWwA23Tjop2KO2JxzkvU6:7qmwoVjCJ0jcli35AQDtnDyWI3nk3OOw
TLSH 0F742302DA08F3A959245C07FD36FADBB77A2B1B1C6457C0876C81DCB44AA843E1A71F
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-02 01:51:00 UTC
File Type:
Binary (Archive)
Extracted files:
287
AV detection:
20 of 31 (64.52%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=f6rxtjvkeke2dabogzg4sqhtrppdbktasy3w5eaze3awvarowwiq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 2fa379a6aa2289a1802e364dc940f38bde30aa6096376e901926c16a822eb591

(this sample)

Loki

Executable exe fc849ef113b6dfd401b03e989e2888e30c62af7938347a2bbca04153f5b36249

  
Dropped by
Loki
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fc849ef113b6dfd401b03e989e2888e30c62af7938347a2bbca04153f5b36249
  
Dropping
MD5 6ed2f249e986cdd33db4b36fd4e522ad

Comments