MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9bbbe447b75ecacced01865fd4f22a12c3f65649abcd73d69579cadc81e8dc92. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9bbbe447b75ecacced01865fd4f22a12c3f65649abcd73d69579cadc81e8dc92
SHA3-384 hash: fafb918e840086a4218b9bad7bdefa81c39aea1962123e9f0fb9b7ff89304a28c504ec9c033d38acd474959c06f26ad6
SHA1 hash: a9e78877a1fdafdea4db0d9257fef01594e5f4d6
MD5 hash: abb4c39ac0c23f86a3d3d7337b878a65
humanhash: juliet-comet-utah-texas
File name:PO#499039.rar
Download: download sample
Signature Loki
Create hunting rule
File size:288'907 bytes
First seen:2020-10-28 12:06:48 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:yeqcJ/jXZNxgbzcVyztMOjDt3xCkrL/mr6RRza+rIm2w6yVRp:yeqcljXZ/g8VyaOjDt3kkP7z7kvnyVv
TLSH A6542319611D941F42AE233ADA345FFB9AEA050478EEF14CEA639161533F1C0BCBD970
Reporter cocaman
Tags:Loki rar


Avatar
cocaman
Malicious email (T1566.001)
From: "=?UTF-8?B?QUxUQU4gR8OcTA==?=<sales@pnitrading.com>"
Received: "from pnitrading.com (ip138.ip-51-81-143.us [51.81.143.138]) "
Date: "28 Oct 2020 05:02:04 -0700"
Subject: "Request for Quote"
Attachment: "PO#499039.rar"

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27363.Rar5Heur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9bbbe447b75ecacced01865fd4f22a12c3f65649abcd73d69579cadc81e8dc92/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=to56ir5xl3fmz3ibqzp5j4rkclb7mvsjvpgxhvuvphfnzapi3sja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

rar 9bbbe447b75ecacced01865fd4f22a12c3f65649abcd73d69579cadc81e8dc92

(this sample)

Loki

Executable exe 6c0612e71239972d92121249145948eec8ccfab90e1e47d0337fabccaaa5ade2

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6c0612e71239972d92121249145948eec8ccfab90e1e47d0337fabccaaa5ade2
  
Dropping
Loki

Comments