🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 59c7f93c0bc240bc4e2a6a88846414f07fd44b90956d3bc8e58597318b92f8a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 59c7f93c0bc240bc4e2a6a88846414f07fd44b90956d3bc8e58597318b92f8a9
SHA3-384 hash: 9e097fa7b7fb84bd2556c6eb6c26bc019f606ca9063c313d84eba7e484b5f80a16ae8055fd31f0d4dd1ec0d50c4bd219
SHA1 hash: 403bf21dac0a7b648c5ebdfb8fe6f39ec7182fed
MD5 hash: 58bff9f521e51f0dad43d90b18573d2b
humanhash: jupiter-mango-lithium-missouri
File name:copy scan 200429_pdf.gz
Download: download sample
Signature Loki
File size:427'847 bytes
First seen:2020-04-29 07:00:40 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:NSeMdu8Z62JgoMzrCm4reDYOF5iR/cxWQRqnSkWYH35kpStTrI2OTTN51AKOpBP5:vMvrCtrC0DYOF5H6fptTm31GNUUvAO
TLSH 6A9423F951350344EA606D94A184B636FB0E30BACE4CF3646DCDD195A90ECFEEB0E658
Reporter jarumlus
Tags:Loki Lokibot

Intelligence


File Origin
# of uploads :
1
# of downloads :
1'426
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-04-29 03:24:35 UTC
File Type:
Binary (Archive)
Extracted files:
40
AV detection:
24 of 30 (80.00%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments