MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b4ea90b5bc956cc55972a6aa369896c1322dca4df89a80ab245cae790347837a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Loki
Vendor detections: 3
| SHA256 hash: | b4ea90b5bc956cc55972a6aa369896c1322dca4df89a80ab245cae790347837a |
|---|---|
| SHA3-384 hash: | 4ecd8c66e95b6d10d0abcc4ee53a571a83c80d7bc32d695a5a1b4ec3178ec56b55309d61c8e6723351e7b8d5978d14c6 |
| SHA1 hash: | ff2af0d035c3adedcd25c4246ea5cab3cbb7d6e3 |
| MD5 hash: | 5d73e754fc9b1a2dc0f4b27b66c1dafb |
| humanhash: | xray-thirteen-speaker-batman |
| File name: | DOC080832020_987.gz |
| Download: | download sample |
| Signature | Loki |
| File size: | 314'494 bytes |
| First seen: | 2020-08-07 09:10:42 UTC |
| Last seen: | 2020-08-21 15:20:58 UTC |
| File type: | gz |
| MIME type: | application/x-rar |
| ssdeep | 6144:6bcWCwai38Q1dp2sLO7h3fIm/gqy3syuQloqY7NLo85YEy6NTu:1pDi3n3ONAH3s2GqvEB8 |
| TLSH | D7642367D4E7CBABA492712A3E6D9B0F33EC2F1D56F671968430062D8DC0B5EE811D48 |
| Reporter |  jarumlus |
| Tags: | Loki |
Intelligence
File Origin
# of uploads :
29
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-08-07 09:12:06 UTC
AV detection:
21 of 47 (44.68%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.