MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4728d141485e13f5ba86195d81d54592b84525c0f4343e99b0f84284fdf0d435. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4728d141485e13f5ba86195d81d54592b84525c0f4343e99b0f84284fdf0d435
SHA3-384 hash: 3fa66e1a8460f6e24e685e961307760845645a54a03d352d7e0e1b384dc75d4924084f50a51b56e80b47f857a0bfc3b8
SHA1 hash: 68d2ca2a95ef9d76719ce7479fda8774be462b71
MD5 hash: 1a723bb117527f627de7b56ebc9cef1b
humanhash: avocado-xray-magazine-illinois
File name:e Maximus Solution Sdn Bhd order_Pdf.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:450'220 bytes
First seen:2020-06-19 05:31:24 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:zlVPc5+uxUAOXnRdkkdupGeXAOTnqMjeUHLwRw+ey4x8:3Pc5VxUAOXRdYGeX7TnjjHLwKZ8
TLSH EAA4238FBB9393CE6B4957080D9633146167E2E0460D2AEB5950DD3F38B274693CB3DA
Reporter cocaman
Tags:AgentTesla gz


Avatar
cocaman
Malicious email
From: e-Maximus Solution Sdn Bhd <eppytan@buntingmax.com.my>
Received: from globe3email.hostcentral.net (mail.globe3.com [103.53.172.34])
Date: Thu, 18 Jun 2020 18:40:00 +0100
Subject: e-Maximus Solution Sdn Bhd Purchase order
Attachment: e Maximus Solution Sdn Bhd order_Pdf.gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-19 05:33:04 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
23 of 31 (74.19%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=i4uncqkilyj7lougdfoydvkfsk4ekjoa6q2d5gnq7bbij7pq2q2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 4728d141485e13f5ba86195d81d54592b84525c0f4343e99b0f84284fdf0d435

(this sample)

AgentTesla

Executable exe 2cd664671f3e8736a9840f60a49c1ec060e4cc4d5af71bd5c32155159ea6ce10

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2cd664671f3e8736a9840f60a49c1ec060e4cc4d5af71bd5c32155159ea6ce10
  
Dropping
AgentTesla

Comments