MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c9c44148239fd7aef0a1c61d2b9be0123b9144e185c82ba62aeaf167d9428b97. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c9c44148239fd7aef0a1c61d2b9be0123b9144e185c82ba62aeaf167d9428b97
SHA3-384 hash: 9fc962cff90b7e87fe5e1cd700b7b3e1bb217a8b83ee6c258ca1f7d2500608057b9db9d832cd5160b1ba768a7652f863
SHA1 hash: bf14c4555db1261cdc4aa1714b4c95c0c219be9f
MD5 hash: 461ff2ecbac647b40830d8093125514c
humanhash: september-six-south-speaker
File name:Quotation-file-141094_pdf.gz
Download: download sample
Signature Loki
Create hunting rule
File size:396'957 bytes
First seen:2020-07-07 04:38:48 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:Lgl9p9OWmy+oH9wGg1WPX6OnY26lnUM6HVvQbf7dRC:LkwGg10YPH/dRC
TLSH EA84230073A21E6114B0BAE9190F0CEDFD8697A6EA1DD9748326746E5CFD2CC7439D8E
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c9c44148239fd7aef0a1c61d2b9be0123b9144e185c82ba62aeaf167d9428b97/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-07 03:10:14 UTC
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zhcecsbdt7l254fbyyosxg7aci5zcrhbqxecxjrk5lywpwkcrolq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip c9c44148239fd7aef0a1c61d2b9be0123b9144e185c82ba62aeaf167d9428b97

(this sample)

Loki

Executable exe 79298aefcdaa74aeb60984fade623a91a84f0ab7fb5f3df342b86a5bb5efacf8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 79298aefcdaa74aeb60984fade623a91a84f0ab7fb5f3df342b86a5bb5efacf8
  
Dropping
MD5 e11246b3919f863900f013eac19f1036

Comments