MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6a371ddf0c4f48d20fd58646b4b84fd086c83d0700efd161efeadbe79432be40. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6a371ddf0c4f48d20fd58646b4b84fd086c83d0700efd161efeadbe79432be40
SHA3-384 hash: 3bae715e7364009059a45939093c27f77715dee3a55ad21849bf9ae72f0ac7a68e3af70135223af12f2dd76f94cf346c
SHA1 hash: baac336e8f880e38db9f809fbeda89e8d2ed54c9
MD5 hash: 32d0dbdfeaa85bc7bbbac57844d90608
humanhash: fish-michigan-comet-idaho
File name:BUSINESS TRANSACTION NOTICE ON COVID-19 DOCUMENT_pdf.arj
Download: download sample
Signature Loki
Create hunting rule
File size:1'505'959 bytes
First seen:2020-05-06 06:47:39 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:2LfUEkMugmK20n0wAvZJiVchkvWB38/2gPqN2lpy8hiQ2XphZpPF83ZqHIZBFJFG:2LfU6ugM+SvZJiDms/AN2l88AQ2X7Fay
TLSH 676533D2EEE261290D65F5E0FCC804E54C6E728834399E28BF43669446ADBDC7354BE8
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Aitinject
Create hunting rule
Status:
Malicious
First seen:
2020-05-06 02:45:49 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
27 of 48 (56.25%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ni3r3xymj5ened6vqzdljocp2cdmqpihadx5cypp5ln6pfbsxzaa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

Executable exe b54e9651f5a4cd0500cb048307ec03bae3acf0c23237a1de1970667bed51d5ce

Loki

zip 6a371ddf0c4f48d20fd58646b4b84fd086c83d0700efd161efeadbe79432be40

(this sample)

  
Dropped by
MD5 50f00fe8700006dafb0717fab9454a52
  
Dropped by
SHA256 b54e9651f5a4cd0500cb048307ec03bae3acf0c23237a1de1970667bed51d5ce
  
Dropped by
Loki
  
Delivery method
Distributed via e-mail attachment

Comments