MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7a5ce5c7be9b7779c246e68743541c9717bfcd2a10d95067b616f83e4e0e3037. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7a5ce5c7be9b7779c246e68743541c9717bfcd2a10d95067b616f83e4e0e3037
SHA3-384 hash: 760274bf15bb3e69d576461dc4ee54daa9697587bfd05af46cca95147edb0ec7bcc0f4b042606b03e72967f29b053457
SHA1 hash: 3c4f46aedaa4c32bc5eb18c684f823d513811702
MD5 hash: 3788b15c3f02ddd531736a5a44f625d9
humanhash: dakota-lima-pluto-carolina
File name:wire transfer copy.arj
Download: download sample
Signature Loki
Create hunting rule
File size:588'791 bytes
First seen:2020-05-07 10:48:45 UTC
Last seen:2020-05-09 21:42:39 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:aJyZ8DIK2Hvwzc8f8pD/7WlUcpTqlsY3e4EEnOS7Ll39E6EAZuY4:aJuqUoITX+Ntql5OS7LHBF94
TLSH 84C4233EA0A38A90087CB4C589BE262F599F610E0FF17E57F38961241D7E7C7C949794
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
3
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Adware.Generic4.BBFB.UNOFFICIAL
Create hunting rule

PUA.Win.Adware.Webalta-6862190-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Androm
Create hunting rule
Status:
Malicious
First seen:
2020-05-07 11:01:20 UTC
File Type:
Binary (Archive)
Extracted files:
59
AV detection:
31 of 48 (64.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pjoolr56tn3xtqsg42dugva4s4l37tjkcdmvaz5wc34d4tqoga3q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip 7a5ce5c7be9b7779c246e68743541c9717bfcd2a10d95067b616f83e4e0e3037

(this sample)

Loki

Executable exe fd109cfe95d8da2681647dd8f860797e521710150721b251277ea7d1fdcc8c88

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fd109cfe95d8da2681647dd8f860797e521710150721b251277ea7d1fdcc8c88
  
Dropping
MD5 efdd754b5c5c0e8904e75a3626888599

Comments