MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 61c9846f5e75b81862973e654f10a87e0630fca7a4a6f26e69278c04a674ce84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 61c9846f5e75b81862973e654f10a87e0630fca7a4a6f26e69278c04a674ce84
SHA3-384 hash: 684172a2dd031d07a2bb505e25bf49eec653b5e871a49d4d21f925da0668f735104f5e945080894f1e30469dfcd608fb
SHA1 hash: 95d90d47fbcd5f378b520b69dcff90a2c5b28da8
MD5 hash: 918dfdb40d930eca72ff0b47a54d254e
humanhash: six-coffee-whiskey-hot
File name:61c9846f5e75b81862973e654f10a87e0630fca7a4a6f26e69278c04a674ce84
Download: download sample
Signature Loki
Create hunting rule
File size:106'560 bytes
First seen:2020-03-23 17:20:54 UTC
Last seen:Never
File type:unknown
MIME type:application/octet-stream
ssdeep 1536:8u2mLnpYY8LotMkLdNN3QShpJChUEujRzjD9cwEs4pkdsHGVZWENPUVn+Ga8G:Va15EQShWhUEkXD9cg4S0KZ5SV+GU
TLSH 0DA3CF9F300FB5B0BA6FD1F0CDADAB079B294D85D016EE7D4A99940398FEBA611107D0
Reporter Marco_Ramilli

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.42884364.17859.8705.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Malicious
First seen:
2020-03-23 17:47:25 UTC
AV detection:
3 of 31 (9.68%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Loki

unknown 61c9846f5e75b81862973e654f10a87e0630fca7a4a6f26e69278c04a674ce84

(this sample)

Loki

Executable exe 03e72ece4ff9a329f73d64b6e2fa52caa8adeb7f7f24919b5d7f52bc8dfa8fdb

  
URLhaus
https://urlhaus.abuse.ch/url/328696/
  
Dropping
SHA256 03e72ece4ff9a329f73d64b6e2fa52caa8adeb7f7f24919b5d7f52bc8dfa8fdb
  
Dropping
SHA256 03e72ece4ff9a329f73d64b6e2fa52caa8adeb7f7f24919b5d7f52bc8dfa8fdb
  
Dropping
MD5 f1b0aae3151e780143be0a7a06911f1c
  
Delivery method
Distributed via web download

Comments