MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4a7c876a55604df910d768d11ed5e58cf97a2a6e26e80f568bad6507a415cf40. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4a7c876a55604df910d768d11ed5e58cf97a2a6e26e80f568bad6507a415cf40
SHA3-384 hash: 5a0ab5ca16c5dddc053e73ca35109fc0f9308024341fd896c72b0accdff0f93e7c88891973b2ca25856b18912f3692f5
SHA1 hash: 88ea4c8e67e81fa6972607366070e1be7159e167
MD5 hash: b210da386f8fe7c01b1e9f3f2c2e0f07
humanhash: harry-tennis-friend-lion
File name:Quotation_pdf.gz
Download: download sample
Signature Loki
Create hunting rule
File size:370'073 bytes
First seen:2020-06-01 12:48:06 UTC
Last seen:2020-06-01 12:55:05 UTC
File type: zip
MIME type:application/zip
ssdeep 6144:k5NArQKdLVVe0xVhx1S1ry7CzgDX7ZdP5Zp6i2QaBSP7/P5gB4Hc7w3NNtoN5:k5NCQmVhx1S1Rgz7ZdhZsi2QQSb5gB48
TLSH 49742393FC8C19D8F6716E914B069C1556E825D31C2F2AA402B7F0CCE829A0ADD6F0CF
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
2
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-01 03:35:41 UTC
AV detection:
28 of 48 (58.33%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jj6io2svmbg7segxndir5vpfrt4xuktoe3ua6vulvvsqpjavz5aa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 4a7c876a55604df910d768d11ed5e58cf97a2a6e26e80f568bad6507a415cf40

(this sample)

Loki

Executable exe 7880e819461fdc72eb551b9cdcbd6d0e8417c685d62efb649caca31307009a66

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7880e819461fdc72eb551b9cdcbd6d0e8417c685d62efb649caca31307009a66
  
Dropping
MD5 1258ba0f3dd3ed5db975a3a38f53b4e7

Comments