MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d9fa8716bac16d5f08359b4a10c074d87aa4736d4c77b7d444dca404b5694f30. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d9fa8716bac16d5f08359b4a10c074d87aa4736d4c77b7d444dca404b5694f30
SHA3-384 hash: 50594915d8bb8d7123d3878c4abb1588ede54d3508d579bd61c113a169b002b0015af022077f427564b90367b56cabc2
SHA1 hash: 042df9671b7e98807a6a53ac63587f0b23ce0c83
MD5 hash: c1b998b8049586c3b285b023c4ae6444
humanhash: xray-mockingbird-neptune-nine
File name:Purchase Order # PO5292.rar
Download: download sample
Signature Loki
Create hunting rule
File size:203'138 bytes
First seen:2020-07-03 03:33:32 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 3072:q8+XFOdvqhA3gHJC4h91GiwJOjZvehwCOp5+LieRjTq+IjpTD959G+854kK:AXsQy3g4Y9En+chFOjMjT8jZ
TLSH CD142376D7DE3411AE5EE091A115FE3BAB888AE8D41D0630374C958E8B40634FD24AFF
Reporter jarumlus
Tags:Loki

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d9fa8716bac16d5f08359b4a10c074d87aa4736d4c77b7d444dca404b5694f30/
Threat name:
ByteCode-MSIL.Trojan.Avemariarat
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 03:35:04 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=3h5iofv2yfwv6cbvtnfbbqdu3b5ki43njr33pvce3ssajnljj4ya._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

rar d9fa8716bac16d5f08359b4a10c074d87aa4736d4c77b7d444dca404b5694f30

(this sample)

Loki

Executable exe b7cb60d089ef36aba7f0f58abd759a5c71f755f1b7842ce1f2acb11c4e192f0d

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b7cb60d089ef36aba7f0f58abd759a5c71f755f1b7842ce1f2acb11c4e192f0d
  
Dropping
MD5 893781a8fd8845fa8009b3ad10eb64c2

Comments