MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3e178138d7fa84766d1e002ca24c5fd92bc2a26b95b7150c1c8ea88b6d9d1cd3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3e178138d7fa84766d1e002ca24c5fd92bc2a26b95b7150c1c8ea88b6d9d1cd3
SHA3-384 hash: d3b5bdd83cb6b5fb88c24470f21f254ead6332256f182ec24911eabdc817f435957e99891f273ff623e5a10315e8fb5d
SHA1 hash: dccaefdcbd615c403f90533a0ba8640cc444dc77
MD5 hash: 0e30f669c0d3acc446b61851a22475e9
humanhash: freddie-earth-bulldog-missouri
File name:DHL66202009475352576532.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:441'134 bytes
First seen:2020-06-18 16:11:28 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:6w9XRlfh4kiEC+37eGpmzkDDe85QqXfSxLIRe2L:6w9bh3Cq7ebMDeJ7LIQ2L
TLSH BD9423DF7D0A0787A98D7846474E12F8A2700641EBC85CBADE365B84F5C0CB24A7DA37
Reporter abuse_ch
Tags:AgentTesla DHL z


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: client-104-168-175-183.hostwindsdns.com
Sending IP: 104.168.175.183
From: DHL Customer Support<support@dhl.com>
Subject: DHL#66202009475352576532 Items
Attachment: DHL66202009475352576532.z (contains "DHL#66202009475352576532.exe")

AgentTesla SMTP exfil server:
smtp.vivaldi.net:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-18 16:36:03 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=hylycogx7kchm3i6aawketc73ev4fitlsw3rkda4r2uiw3m5dtjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 3e178138d7fa84766d1e002ca24c5fd92bc2a26b95b7150c1c8ea88b6d9d1cd3

(this sample)

AgentTesla

Executable exe e5b32753edbcb2b6293bac76ce830328b5c142d4de5c26a12216f4c80632448d

  
Dropping
MD5 58f6417a33bcbe689e8b511474bc03c3
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e5b32753edbcb2b6293bac76ce830328b5c142d4de5c26a12216f4c80632448d

Comments