MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 360980b766a82e10f11dea74f62b53e59c367691c8fe8be42940392c03ef9f9a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


NanoCore


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 360980b766a82e10f11dea74f62b53e59c367691c8fe8be42940392c03ef9f9a
SHA3-384 hash: af04083d5a2b142a3a0c9c44324a305425024fc7b526d8a813d3ebb34a5ebfc677f5be28064eeccda2a6da6007e03008
SHA1 hash: ba1cf977893fe39249dc6aa1b462a19f076a2ca9
MD5 hash: cfb760fd331166aabec3ebb3c868aee7
humanhash: wisconsin-bluebird-berlin-muppet
File name:PO#821556_MAY_new_order_products_Tin_Thao_Co.arj
Download: download sample
Signature NanoCore
Create hunting rule
File size:460'006 bytes
First seen:2020-05-12 05:50:03 UTC
Last seen:Never
File type: arj
MIME type:application/x-rar
ssdeep 12288:YOJ1LDhXbo/bstMFQy7r2OOX8N6qrdmIJUfrVh:5hLo/bstiLP2OOXRqJmmuVh
TLSH 7BA423746DC50D76C04D1F09BC3D66139BE2AB3F297B152E24EB250772DC9E2A580E8B
Reporter jarumlus
Tags:NanoCore

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27363.Rar5Heur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Loki
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 06:36:00 UTC
File Type:
Binary (Archive)
Extracted files:
267
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gyeybn3gvaxbb4i55j2pmk2t4wodm5urzd7ixzbjia4sya7pt6na._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

NanoCore

arj 360980b766a82e10f11dea74f62b53e59c367691c8fe8be42940392c03ef9f9a

(this sample)

NanoCore

Executable exe 7259675aad35bed593ec88a0f96263e182eaac06043f25df3362eb29186d2cd1

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7259675aad35bed593ec88a0f96263e182eaac06043f25df3362eb29186d2cd1
  
Dropping
MD5 5013ed351140e9573b350dcb0dfeaf32

Comments