🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4048ef4e7c239690655345b25d54a0c6610a6c5fa8c93d72a42d6b5fb588ab31. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Loki


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 4048ef4e7c239690655345b25d54a0c6610a6c5fa8c93d72a42d6b5fb588ab31
SHA3-384 hash: 1f4e5c2c6149b55654a52859dfb544fce170371e8e3f9f0330c118d399469a2eb79a98ce069ab2bd28c14575f88bcf97
SHA1 hash: 7ced34bee682f0da872eb1cf3a00180de3f81c91
MD5 hash: cfbe25db027a136e86e8ada5d7696699
humanhash: virginia-pennsylvania-lamp-bravo
File name:Standard Chartered.gz
Download: download sample
Signature Loki
File size:414'030 bytes
First seen:2020-10-07 11:31:50 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:6vhfVvUVrZIXa2xsRzm8EbKf8UfVCE1VxASaR2tbY:mrvU9aHW7EQ/fVN1V+Sq2K
TLSH 4B9423993AE109D283F8BD05674A9B877E59831E265C67BC0C0DBF2EA9334041ED49F7
Reporter Olrac
Tags:Loki Lokibot

Intelligence


File Origin
# of uploads :
1
# of downloads :
939
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.LokiBot
Status:
Malicious
First seen:
2020-10-07 06:10:09 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

gz 4048ef4e7c239690655345b25d54a0c6610a6c5fa8c93d72a42d6b5fb588ab31

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments