MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 48269ac30385584c424e63c11dc76b212250b7ffbdfbc8ee2009bece03991418. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Lucifer


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 48269ac30385584c424e63c11dc76b212250b7ffbdfbc8ee2009bece03991418
SHA3-384 hash: c9f9dfb4317ff61ed253ebd602497fd0a238f84357044f742f24cc343a13baf62d9d07bee22a4dce115196623f9ba493
SHA1 hash: 1f53d2b1e075ff1148e478741a7549990dc53b30
MD5 hash: 0c4078d4772153dbbedd8f016e36a008
humanhash: orange-emma-harry-south
File name:Fedex clearance receipt.img
Download: download sample
Signature Lucifer
Create hunting rule
File size:1'769'472 bytes
First seen:2020-09-07 07:52:45 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:fJiF8l+lqtKH9vEgy+cJiF8l+lqtKH9vEgy+:fJBl+lG6et+cJBl+lG6et+
TLSH 70850131761C6A9BEEF902F4042EB51017F86D2A1501E6CE7CCDB6DE65F3BC10A11A9B
Reporter cocaman
Tags:img Lucifer


Avatar
cocaman
Malicious email
From: "TrackingUpdates@fedex.com<TrackingUpdates@fedex.com>" <nw@inazma.org>
Received: from o16824546x253.outbound-mail.sendgrid.net (o16824546x253.outbound-mail.sendgrid.net [168.245.46.253])
Date: Mon, 07 Sep 2020 07:49:43 +0000 (UTC)
Subject: FedEx Shipment Clearance Delay
Attachment: Fedex clearance receipt.img

Intelligence

File Origin
# of uploads :
1
# of downloads :
122
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.W32.Trojan-7.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/48269ac30385584c424e63c11dc76b212250b7ffbdfbc8ee2009bece03991418/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-09-07 05:16:38 UTC
AV detection:
13 of 29 (44.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jatjvqydqvmeyqsompar3r3leerfbn77xx54r3rabg7m4a4zcqma._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
AgentTesla
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/48269ac30385584c424e63c11dc76b212250b7ffbdfbc8ee2009bece03991418

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Lucifer

img 48269ac30385584c424e63c11dc76b212250b7ffbdfbc8ee2009bece03991418

(this sample)

Lucifer

Executable exe a777ac93ff0c17ae3f7d317ac3a4f01584bf17dd2d00353adc398e5b1723556b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a777ac93ff0c17ae3f7d317ac3a4f01584bf17dd2d00353adc398e5b1723556b
  
Dropping
Lucifer

Comments