MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 14ae71cd57a8759b83ba7909b21cbf2ed542edd3635f24fe52182412bb7fa08d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 14ae71cd57a8759b83ba7909b21cbf2ed542edd3635f24fe52182412bb7fa08d
SHA3-384 hash: f36c2d4aa21f67ed96b2aeffd73160e9b8d8da78b45f9620155610b945e646b008e724b0fac382dc935daf04f69dc093
SHA1 hash: e59929dd35b3d5ba22f49a970b200768684de190
MD5 hash: ae5cdc9488df2c44d34231de48416896
humanhash: blossom-lamp-freddie-muppet
File name:Requested SOA.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:644'578 bytes
First seen:2020-06-16 10:46:48 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:NOT9mfqEv1RQZCgJyYmfTJiRO5MEu1WDKJyaHw5:k5mfqa9+RO6EyJPHe
TLSH 2DD4335576B8311F5C78E4F10CCF2E52A8B0AA38152FA2546D115C62FB6B876CF3E34A
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: uzlinshpl01.uzcloud.uz
Sending IP: 185.74.4.8
From: Project manager <alejandra.seguracruz@grupogarel.com>
Reply-To: oliviamiller878@gmail.com
Subject: Statement of Account/Ledger
Attachment: Requested SOA.rar (contains "Requested SOA.exe")

AgentTesla SMTP exfil server:
mail.flood-protection.org:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-16 10:48:07 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=csxhdtkxvb2zxa52pee3ehf7f3kuf3otmnpsj7ssdasbfo37ucgq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 14ae71cd57a8759b83ba7909b21cbf2ed542edd3635f24fe52182412bb7fa08d

(this sample)

AgentTesla

Executable exe 31a83eeaed551ab0fd49211ea01163c1284fcf575391329f290f1e2c2e5c8ed4

  
Dropping
MD5 0d34c29f6a94c659e0053af550012509
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 31a83eeaed551ab0fd49211ea01163c1284fcf575391329f290f1e2c2e5c8ed4

Comments