MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 36099da74260bc5d41d9658421d331f73741a4d670bbbf33f1bc9da7be3c2df0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 36099da74260bc5d41d9658421d331f73741a4d670bbbf33f1bc9da7be3c2df0
SHA3-384 hash: 8be493065e27c0a886518bc64426eb0dc406cff9959ba556db9eaade4bcf61c485c85decf88b0777a8c51fd2b12be3c0
SHA1 hash: 66eef87754f24c8f5ecdf573d678b9dbcba72c62
MD5 hash: 3b717d479d0f0a77c75c8fb4d8d451d3
humanhash: single-fourteen-fifteen-cola
File name:Order Confirmation 0263417.7z
Download: download sample
File size:397'740 bytes
First seen:2020-11-05 09:17:40 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:8BFtaMrOco5o94vXkXT1zs4AlryJjdVO25HKC9+nWDxw/98d2+zfRhvcxeFMUz4+:oFtwhvkJVAlrl22nuxYmh/Ex247q
TLSH 0F8423922708B49F85A0C5E9B01A2F3A67F9635376AF1DD0015E7F41F04D78AF23399A
Reporter abuse_ch
Tags:7z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail.madalinagrup.ro
Sending IP: 89.120.113.36
From: AKHILA NAND MISHRA <orders@kanelli.eu>
Subject: Order November 4, 2020
Attachment: Order Confirmation 0263417.7z (contains "Order Confirmation 0263417.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/36099da74260bc5d41d9658421d331f73741a4d670bbbf33f1bc9da7be3c2df0/
Threat name:
Win32.Trojan.LokiBot
Create hunting rule
Status:
Malicious
First seen:
2020-11-05 01:35:16 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gyez3j2cmc6f2qozmwccduzr643udjgwoc536m7rxso2ppr4fxya._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

7z 36099da74260bc5d41d9658421d331f73741a4d670bbbf33f1bc9da7be3c2df0

(this sample)

Executable exe 3e0a37f088d0afcb0d3528f6df73368d754f51c07acff855e1c991071cebd298

  
Dropping
MD5 1c7be25f8b1dd283f68b620fc80b8fdb
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3e0a37f088d0afcb0d3528f6df73368d754f51c07acff855e1c991071cebd298

Comments