MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3dad66f01e53b7324125ea6d8e59e19380557ae0366f7ed8e07a7b393505533b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3dad66f01e53b7324125ea6d8e59e19380557ae0366f7ed8e07a7b393505533b
SHA3-384 hash: b46a918245f2bfacb78ed0e879683a7884758df7ccd0191d2685bbc106feada89e0e2dbdbd9ca7fe30ceb41eff00f355
SHA1 hash: 57fe91793204ee54123ee55a68eefbf5d0682ac7
MD5 hash: 73a08d50af748d0ea058c45a2c3dcc21
humanhash: solar-fish-pizza-magnesium
File name:MT103 Swift Bank Transfer.zip
Download: download sample
Signature Loki
Create hunting rule
File size:26'720 bytes
First seen:2020-04-06 05:05:00 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:whvGFEq4XM/YjRKDFFYwzT5qt3+6taBji:sGFz7fFBQpL0Q
TLSH CDC2E10A185B7328B3BC1E24160C81EDC4A15B91A6E37EF9C552D6337C739AA92D3D4E
Reporter cocaman
Tags:Loki zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Packed.Noon-7650558-0
Create hunting rule

Win.Malware.Generic-7650850-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-04-06 05:35:34 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
23 of 47 (48.94%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=hwwwn4a6ko3teqjf5jwy4wpbsoafk6xagzxx5whapj5tsnifkm5q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 3dad66f01e53b7324125ea6d8e59e19380557ae0366f7ed8e07a7b393505533b

(this sample)

Loki

Executable exe 51530d6352af87e10db2f455b806a2fc81b82d26658df8d46067d6dc44201bec

Loki

Executable exe c18c647694bc85d12a66e7c15abdc5c116ba95872c9fcfac1bfc29c6927c9783

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c18c647694bc85d12a66e7c15abdc5c116ba95872c9fcfac1bfc29c6927c9783

Comments