MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 32dad6c10ee45fb5c1130ecbbacaf631c1774c73a12e67de771a572a53be21ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 32dad6c10ee45fb5c1130ecbbacaf631c1774c73a12e67de771a572a53be21ed
SHA3-384 hash: 2c25be892c44c1a9a9008b7c3371cc2b7c9040a387272d5121f173f4afe5acfb6ef5cfa5c747db35722cf66e13d167cb
SHA1 hash: c31f3255740130bdb8c2e37261fea3f75db20d68
MD5 hash: 6ae11191c2b858c5055afe42cb7bf6c9
humanhash: zulu-nuts-salami-delaware
File name:Kimenő számlák.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:499'050 bytes
First seen:2020-07-13 11:49:05 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:kS3mvyt9acH0gjBr72G9rBKN4Yv1WTlVqgmMXhmf+lIN/G0FhBA:B3mYEyPSATVXhmnpf7A
TLSH 48B423060B579BFAC2A6B917EF49DAE938469549D1C37BD33F3838B90D409580DD28B3
Reporter abuse_ch
Tags:AgentTesla geo HUN rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: chla185.avzservicios.es
Sending IP: 185.176.10.68
From: e-szamlazas@fizetesipont.hu
Subject: Kimenő számlák (F-K99134/20) Értesítő
Attachment: Kimenő számlák.rar (contains "ggg.exe")

AgentTesla SMTP exfil server:
mail.serviciocitroen.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/32dad6c10ee45fb5c1130ecbbacaf631c1774c73a12e67de771a572a53be21ed/
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-13 11:51:05 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=glnnnqio4rp3lqitb3f3vsxwghaxotdtuexgpxtxdjlsuu56ehwq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 32dad6c10ee45fb5c1130ecbbacaf631c1774c73a12e67de771a572a53be21ed

(this sample)

AgentTesla

Executable exe c1ac23cf47bac86cd0591532f7c76a813c12eb8a04cd93c474c821402d18972e

  
Dropping
MD5 7f8cd5575261264148b816ff4a359fed
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c1ac23cf47bac86cd0591532f7c76a813c12eb8a04cd93c474c821402d18972e

Comments