MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9815061ddb221f6a603e73233f3dca89069071303cdd6e5845d8811b1f1126c1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9815061ddb221f6a603e73233f3dca89069071303cdd6e5845d8811b1f1126c1
SHA3-384 hash: 5c67ebed6060b08e2bfc8ade92f6a14fae3c6f528571dd8eda0de31b56c66e24e60f78ead86d5e11860cb6564a1d57d3
SHA1 hash: d4be9a7a46ba135e5b91e1a79a09fc55284bb5a3
MD5 hash: 452ff11123bc371c3cf9298cc5fbca1f
humanhash: bravo-freddie-ack-video
File name:Shipment doc.ace
Download: download sample
Signature Loki
Create hunting rule
File size:26'093 bytes
First seen:2020-06-01 12:10:33 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 384:IjHRBIrneOUg3Mws8D6GH1rveF8JJT0ApQ20MlRdzsJO15/Kz7NSyRk+hNtqLnbL:YHEDM8PDBJdEMlR1EO11KNRkEObyMb
TLSH 1FC2E119504667DB3CC7AE6BC042B1A7637B405DD6C1C749D6369E2BD8B8A3F900F3A8
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-01 12:35:44 UTC
AV detection:
23 of 48 (47.92%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

ace 9815061ddb221f6a603e73233f3dca89069071303cdd6e5845d8811b1f1126c1

(this sample)

Loki

Executable exe faac07736e1c735a2b4028b9a77bcf0897944e3ce16977c61b6af1b45592d6b0

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 faac07736e1c735a2b4028b9a77bcf0897944e3ce16977c61b6af1b45592d6b0
  
Dropping
MD5 c5c0b0b5155a76c8037160aacca73866

Comments