MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d338755da4dcd93e5072239b03eba9102aa75a96be5f587b70e3283d10739e3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2d338755da4dcd93e5072239b03eba9102aa75a96be5f587b70e3283d10739e3
SHA3-384 hash: 027e616104c97db566d3c8af39cbb71c803a53d95a2d59a4a354c3d36e3b37b490216708ae281dc8b47e10c47527d052
SHA1 hash: 747a07811d0cdaa4fc86fc54c96a43899c025a32
MD5 hash: 86a9a70b7e42e7db965941ddcb708eac
humanhash: angel-helium-mexico-alpha
File name:Purchase Order.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'441'792 bytes
First seen:2020-03-26 06:03:11 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:/AHnh+eWsN3skA4RV1Hom2KXMmHajB25:ih+ZkldoPK8YajK
TLSH 0C657B0273D1D036FFAB92739B6AB20556BD7D250133852F23982DB9BE701B1263D663
Reporter cocaman
Tags:AgentTesla img

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Aiis-6803892-0
Create hunting rule

SecuriteInfo.com.AIT.Trojan.Nymeria.1583.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Geniso
Create hunting rule
Status:
Malicious
First seen:
2020-03-26 03:14:18 UTC
File Type:
Binary (Archive)
Extracted files:
17
AV detection:
16 of 45 (35.56%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=fuzyovo2jxgzhzihei43apv2sebku5njnps7lb5xbyzihuihhhrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 2d338755da4dcd93e5072239b03eba9102aa75a96be5f587b70e3283d10739e3

(this sample)

AgentTesla

Executable exe ad3ed5a2a7fdaf7778464c1f3bd3de13972d04e7123522cb906ea18112e359ba

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ad3ed5a2a7fdaf7778464c1f3bd3de13972d04e7123522cb906ea18112e359ba

Comments