MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 53f054c54230fd685c2ec50122e1b06543cab3b98fbb14178c8bd79d069c9467. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 53f054c54230fd685c2ec50122e1b06543cab3b98fbb14178c8bd79d069c9467
SHA3-384 hash: 0298e06c06cec54c16895761b7e8d21c0e9ee874d32227877c00aebdd44b49d47ff73cbb4177da7123bd106708d51194
SHA1 hash: 11e0395b2f3ba713d4c6d38c53fdd790f979675b
MD5 hash: 9372703b2f9293a143451e21c7f231f1
humanhash: stream-nuts-purple-ceiling
File name:FA.2020.06.5597.DOCX.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'245'184 bytes
First seen:2020-06-29 12:43:37 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 6144:4et9mFZH6xRF3Jnb5HCFvW0aXJXZadKj7:w6PbBrTF
TLSH 1B45B52BBD85EA19D1085933C0EF190053B5A9C22673D70F7EDEB7680E413A77D262AD
Reporter abuse_ch
Tags:AgentTesla img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: myown.com127.0.0.1
Sending IP: 2.56.8.14
From: contabilita@linificio.site
Subject: Pagamento Recusado
Attachment: FA.2020.06.5597.DOCX.img (contains "FA.2020.06.5597.DOCX.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Injector.UZM.10016.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/53f054c54230fd685c2ec50122e1b06543cab3b98fbb14178c8bd79d069c9467/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 12:45:09 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=kpyfjrkcgd6wqxboyuasfynqmvb4vm5zr65rif4mrplz2bu4srtq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 53f054c54230fd685c2ec50122e1b06543cab3b98fbb14178c8bd79d069c9467

(this sample)

AgentTesla

Executable exe f41d910195a48409a0d7047fa3e9d2d62b19361c92f8f2f045d9a4ba7a0e869e

  
Dropping
MD5 64408fc55c01c6541b12602a400280e5
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f41d910195a48409a0d7047fa3e9d2d62b19361c92f8f2f045d9a4ba7a0e869e

Comments