MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fe68f0d60e6e7af4645fd349d83f4324c3ff1f6769bd85b0a706921cd8e7c7e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Loki


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fe68f0d60e6e7af4645fd349d83f4324c3ff1f6769bd85b0a706921cd8e7c7e7
SHA3-384 hash: 3329acf65fbb002b51edd5f4ca8447db5d8a05bb1ed3ccc68a65667dc6e781f7c9389519a7c536c5cf499d63fed3daaa
SHA1 hash: 74d7b3fba67153baad013a21f6566d161e636db1
MD5 hash: bcdb417e77ba8b8f3a120ca73b9d0490
humanhash: hot-carolina-orange-december
File name:Volume 3 - Part 12 - Kitchen LaundrySpecs.zip
Download: download sample
Signature Loki
Create hunting rule
File size:397'681 bytes
First seen:2020-07-07 08:35:36 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:QwiEe6D7NBcK5mIOtrprTb3ze8lLzUiQTFOdeoygceDfpgrD9JxQOwitx0xlMSwA:IEeGBtmZ9T28lITFZgc+fpqJBFtMwrcF
TLSH 5384231322E86A157C54BEF8A2CFAEDBCFCBA4E77E1C074B9590559C30659443BB8C18
Reporter abuse_ch
Tags:Loki zip


Avatar
abuse_ch
Malspam distributing Loki:

HELO: mail0.608.wulongdimkim.casa
Sending IP: 139.59.80.199
From: Technical Co ordinator <tc@aakeuae.com>
Subject: RFQ FOR ABUDHABI MEDICAL REHABILITATION CENTRE- ADE
Attachment: Volume 3 - Part 12 - Kitchen Laundry Specs.zip (contains "Volume 3 - Part 12 - Kitchen & Laundry Specs.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

SecuriteInfo.com.Win32.Herz.B.18879.21615.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fe68f0d60e6e7af4645fd349d83f4324c3ff1f6769bd85b0a706921cd8e7c7e7/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-07 08:37:07 UTC
AV detection:
34 of 48 (70.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7zupbvqonz5pizc72ne5qp2detb76h3hng6ylmfha2jbzwhhy7tq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Loki

zip fe68f0d60e6e7af4645fd349d83f4324c3ff1f6769bd85b0a706921cd8e7c7e7

(this sample)

Loki

Executable exe d534274a6ef58724a14a225417cbb2a97be121421ff270290e6e7c4e51442fd7

  
Dropping
MD5 b2220e5a48bbdfee51a5c3f639d85295
  
Dropping
Loki
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d534274a6ef58724a14a225417cbb2a97be121421ff270290e6e7c4e51442fd7

Comments