MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1b7aa9cdf53862ead0ab18b1940188c32425b47f69d4096df56702053ddc2cbd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1b7aa9cdf53862ead0ab18b1940188c32425b47f69d4096df56702053ddc2cbd
SHA3-384 hash: e0327129d24a329385924b8a49f9945ae14cfccb61442f458222bf4b07b695887278dc3e6104f7fb85be0b69dbeef9b3
SHA1 hash: 3db2415f7f13b855b34776050fe3ab68b7f56c59
MD5 hash: a5525f478839eb0db18acf524a482bee
humanhash: equal-aspen-beer-uncle
File name:Terms & Conditions.pdf.zip
Download: download sample
File size:487'898 bytes
First seen:2020-05-09 21:35:04 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:pA8X9/WMLITPYeA/xY2QhiXopyj8EzqY/9d6J4B2Z/eC:F9ugmYeA/xY4opy5Fd6HWC
TLSH 69A423CA9C36015B3FEDB22FE12FCC60742FD8C068F485A35845438E56A5E72EF955A2
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BehavesLike.Win32.Generic.hc.26358.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-09 12:53:55 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
26 of 48 (54.17%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=dn5kttpvhbrovufldcyziamiymsclnd7nhkas3pvm4bakpo4fs6q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 1b7aa9cdf53862ead0ab18b1940188c32425b47f69d4096df56702053ddc2cbd

(this sample)

AgentTesla

Executable exe a18085ac71d9d467d624492a847de1e7b6f7d4439ac496acbc67e28977e60606

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a18085ac71d9d467d624492a847de1e7b6f7d4439ac496acbc67e28977e60606
  
Dropping
MD5 2cdfc23862dd7eaad438857cf157e927

Comments