MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 91df4f6f98329c328a4bd764894ce2afb97209704eb0a109eb1e40c954bd5c1f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Loki
Vendor detections: 4
| SHA256 hash: | 91df4f6f98329c328a4bd764894ce2afb97209704eb0a109eb1e40c954bd5c1f |
|---|---|
| SHA3-384 hash: | 3f86dc2e0996c66d7c1fae3049fe1e473c01fceaa3a31d49cd188fb99ded4e48c878af1e7a201159570031334061f66b |
| SHA1 hash: | 99bcd7886af6bd3b62cb3b42b775f6e06501092f |
| MD5 hash: | 05bafa8c065511d617da97109709b27c |
| humanhash: | jig-wyoming-two-summer |
| File name: | TT Copy.gz |
| Download: | download sample |
| Signature | Loki |
| File size: | 513'142 bytes |
| First seen: | 2021-01-14 16:16:06 UTC |
| Last seen: | 2021-01-15 06:21:10 UTC |
| File type: | gz |
| MIME type: | application/gzip |
| ssdeep | 12288:5Mx4L2bkHfHjnZxoPuoSg0ROs25VCFw5ypk67:+6JHfHjpoSTOs25VCm8W67 |
| TLSH | CEB4238E1841CFA745ADA32353D595EC7DBA8D0A884DBA005FA9F621C8C6BD0C1395FE |
| Reporter |  lowmal3 |
Intelligence
File Origin
# of uploads :
3
# of downloads :
96
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Threat name:
Win32.Trojan.Wacatac
Status:
Malicious
First seen:
2021-01-14 16:17:05 UTC
AV detection:
12 of 29 (41.38%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.