MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b76f387f101c4c9c28ed7918a79ee2c7d83293547e1257b03d5bbd6c33b8544f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b76f387f101c4c9c28ed7918a79ee2c7d83293547e1257b03d5bbd6c33b8544f
SHA3-384 hash: 5be0ddc05f97a23d25bc1f4c0b10ea41ccf75307d8c7e9f0485d4f1532fa39d7f3bb9ecf758775d0ceb1aee4dad29c8c
SHA1 hash: 0034ea561de89ee492247201722f9a2c150a96b6
MD5 hash: e0dc0f7a19004f5fe7b98787985debf5
humanhash: fifteen-red-oranges-coffee
File name:NEW PURCHASE ORDER FOR COVID-19 SHIPMENT_pdf.arj
Download: download sample
Signature Loki
Create hunting rule
File size:710'070 bytes
First seen:2020-05-13 05:20:10 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:/zntgwMXcNsf0sykMuSmp3womOnP2mT40Vb5f6QlmCBR5jqJxDPzQYntIkUMnc7Y:/4vykMudm+20b5fplL5eJxDPzQYthUvk
TLSH BDE423B9623B0B680B413D385545D88B581AF774A17FE71A3D36CBEA8BB8CD57388503
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 22:03:55 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
23 of 48 (47.92%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=w5xtq7yqdrgjykhnpemkphxcy7mdfe2upyjfpmb5lo6wym5ykrhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip b76f387f101c4c9c28ed7918a79ee2c7d83293547e1257b03d5bbd6c33b8544f

(this sample)

Loki

Executable exe 0ce415968da95cacf9c2e3f008d29462100fe51eef1d9201ce32632f5ec14d77

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0ce415968da95cacf9c2e3f008d29462100fe51eef1d9201ce32632f5ec14d77
  
Dropping
MD5 486bb76ba417ec45ef29ce6cfc4bb1cd

Comments