MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 25fcef0bb522543baa7705e6a3c77b0286f332363abf62d73d1ea029c9986194. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 25fcef0bb522543baa7705e6a3c77b0286f332363abf62d73d1ea029c9986194
SHA3-384 hash: 03d65ebccd3d2b5eaa27dc53aefb9edcc61644af378b6953c4d5b9923f96df25917a8264829cfcb0e18788e9b9630f5e
SHA1 hash: d01d51cbc78fa16201eb4235d78db1bdf853427a
MD5 hash: ea4b02d886b95e40c8dfe19d4700e8ef
humanhash: sierra-cat-failed-autumn
File name:Swif copy USD 47000.xz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:497'483 bytes
First seen:2020-07-09 04:20:59 UTC
Last seen:Never
File type: xz
MIME type:application/x-rar
ssdeep 12288:BIG+WUbNjDxioImkqLMDwtGIgTGLuLHas3MHQ61NN7A:BIGWdxN5GDwtlNAZ3M/1NhA
TLSH CAB423F5086639AEE36AB53CD08A4F2DDE08A1D44AB7EE508971C7401374D25AAF7CDC
Reporter cocaman
Tags:AgentTesla xz


Avatar
cocaman
Malicious email
From: =?UTF-8?Q?Ashif_C=2EK_=E2=80=93_Accounts_department?=
<info@npfqqtar.com>
Received: from 142-4-22-49.unifiedlayer.com (142-4-22-49.unifiedlayer.com [142.4.22.49])
Date: Wed, 08 Jul 2020 17:26:39 -0600
Subject: 50% Deposit Payment Transfer
Attachment: Swif copy USD 47000.xz

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/25fcef0bb522543baa7705e6a3c77b0286f332363abf62d73d1ea029c9986194/
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-09 04:22:08 UTC
File Type:
Binary (Archive)
Extracted files:
110
AV detection:
17 of 28 (60.71%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ex6o6c5vejkdxktxaxtkhr33akdpgmrwhk7wfvz5d2qctsmymgka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

xz 25fcef0bb522543baa7705e6a3c77b0286f332363abf62d73d1ea029c9986194

(this sample)

AgentTesla

Executable exe 206245d53bb82c709f63b0544db47e0ba5a9822520e332ff818f481f8415f228

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 206245d53bb82c709f63b0544db47e0ba5a9822520e332ff818f481f8415f228
  
Dropping
AgentTesla

Comments