MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 026dbbeef005ce96c8af3b0666089f01efe4ae2fd30eb7fbb806e5e75fdf4886. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 026dbbeef005ce96c8af3b0666089f01efe4ae2fd30eb7fbb806e5e75fdf4886
SHA3-384 hash: ed3fd7fa81ca4d6c697f3dd17a1c2900a0804b22dcaa71db117727146ff78bdde98ef303d291ba66e8de59982bd71cd3
SHA1 hash: 56d0e29579f0377e936144dd2741a96d8a24b5f3
MD5 hash: 24e40cf03249616290e57359dc18fd49
humanhash: nebraska-oxygen-bulldog-west
File name:SHIPPING DOCUMENTS AND EXIT ENTRY NOTE.XZ
Download: download sample
Signature AgentTesla
Create hunting rule
File size:937'016 bytes
First seen:2020-06-18 05:33:42 UTC
Last seen:Never
File type: xz
MIME type:application/x-rar
ssdeep 12288:AmEf3/Vxe7eIykS86Xe+tEGT/j6haCWhztiOp2GFvI7SRumTb34/zAdmFAcJ0xAj:Am+qiGeEGb+haCDD9GsFAcUsuhY
TLSH F215339D710059EE773EBF7EBF9700E250BED0C89DE38CC9A4232432A591460F1995AE
Reporter cocaman
Tags:AgentTesla xz


Avatar
cocaman
Malicious email
From: Karen Wellsted <krunal.langhnoja@dhl.com>
Received: from dotsmail.itsoul.com (dotsmail.itsoul.com [107.6.134.141])
Date: Thu, 18 Jun 2020 04:31:40 +0530
Subject: REVISED SHIPPING DOCUMENTS AND EXIT ENTRY NOTE!!
Attachment: SHIPPING DOCUMENTS AND EXIT ENTRY NOTE.XZ

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-18 05:35:05 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ajw3x3xqaxhjnsfphmdgmce7ahx6jlrp2mhlp65ya3s6ox67jcda._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

xz 026dbbeef005ce96c8af3b0666089f01efe4ae2fd30eb7fbb806e5e75fdf4886

(this sample)

AgentTesla

Executable exe 301e1fa5855704be7f2c773cb7393098c89fe31b40dc6237420835d1c53a6a64

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 301e1fa5855704be7f2c773cb7393098c89fe31b40dc6237420835d1c53a6a64
  
Dropping
AgentTesla

Comments