MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a1cebad75ba3d87b807bd21abb5164cc62bccd5ff7af543e401dcb0758686adc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a1cebad75ba3d87b807bd21abb5164cc62bccd5ff7af543e401dcb0758686adc
SHA3-384 hash: 9fb1916d878237dee5b3aa1b87c9a798ad3962a5386f3acc29f69a7ea8a839c1ebb1e9dbc3f19d795ea3eb1eadc9a39d
SHA1 hash: 4f1e5f17728831c734fc4e7203a9de8213a62669
MD5 hash: 64d092a78f47ccb13d10d5af8e624f40
humanhash: happy-kilo-low-blossom
File name:file-copy411044_pdf.gz
Download: download sample
Signature Loki
Create hunting rule
File size:371'827 bytes
First seen:2020-06-03 06:23:59 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:we8Cq7m3aK3jF6yCR2g59un9A/Afl5ekKcRLM1sa7KLi2n4cfos1cxR:wXx7mK8CIN5eka9zc11cX
TLSH 8E8423E641967836FA17C5E8CA0E734F3F78C5A3939BFE84C5B62A4D48812E14ED6C44
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 01:41:37 UTC
File Type:
Binary (Archive)
Extracted files:
316
AV detection:
21 of 31 (67.74%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=uhhlvv23upmhxad32inlwulezrrlztk766xvipsadxfqowdinloa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip a1cebad75ba3d87b807bd21abb5164cc62bccd5ff7af543e401dcb0758686adc

(this sample)

Loki

Executable exe 4bfa55fd46cd1456d84b1e745a5d3d9f3dd693c65cb4770c8d1bcf43d0b3b2a8

  
Dropped by
Loki
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4bfa55fd46cd1456d84b1e745a5d3d9f3dd693c65cb4770c8d1bcf43d0b3b2a8
  
Dropping
MD5 12855f0db24a5e25673b747cc8cf5518

Comments