MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 48d248c1e85e72722a1985b3e924537b89073d85ec64741156f1cf056657a0f4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 48d248c1e85e72722a1985b3e924537b89073d85ec64741156f1cf056657a0f4
SHA3-384 hash: e73cbb472da384046ec41627ac87e8a3fb5b047a555676fcb59c5de73ea19fb29a118ce87af34914f367348847f9ef7b
SHA1 hash: d47a05b0f56b470a3f325743d0ab6ed0cec69c78
MD5 hash: 5e86ad1b12321ed3d94515c9ed31979c
humanhash: orange-timing-tennessee-arizona
File name:Proforma Invoice.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:592'789 bytes
First seen:2020-07-08 06:38:39 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:CPQ3jqt89IRSgj/f7dQgIQ6K0QT1qq4WsEKqWaTcDFP9JYMyfKaYzJ:CPEe8qRbhQo6xQBqq4WsGlw59JYMyNYd
TLSH B8C4238E5719EFC191B00F1F1D2AE8111EE7889C3F2CDC3C96A4AE57DA950C962A7734
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/48d248c1e85e72722a1985b3e924537b89073d85ec64741156f1cf056657a0f4/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-08 06:40:09 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jdjerqpilzzhekqzqwz6sjctpoeqopmf5rshiekw6hhqkzsxud2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 48d248c1e85e72722a1985b3e924537b89073d85ec64741156f1cf056657a0f4

(this sample)

AgentTesla

Executable exe cfadd7df7cc82715d61fdab7c61ccda630542c6d4e860cfc87bebde2ad0e4cc1

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cfadd7df7cc82715d61fdab7c61ccda630542c6d4e860cfc87bebde2ad0e4cc1
  
Dropping
MD5 1a250202823dc2918d29aa7382e57cc0

Comments