MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5844860ed3a0804f1bd5879031b12387dd15ac0ee5ce7d1b4fed8130ee72de4d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5844860ed3a0804f1bd5879031b12387dd15ac0ee5ce7d1b4fed8130ee72de4d
SHA3-384 hash: a1a6c348282841cf984540d377258b3aa44fb1e0785c3d9ecbe8fbd1c7b7c969224d4dc88c5557342ec94df7b7b1a3a1
SHA1 hash: f54bee44cae43b0c02d9b1717e5eb53422edb6f6
MD5 hash: cf41a8d4d28d1496a356ab88db0c921b
humanhash: cola-yellow-coffee-burger
File name:P.O 2553 Maheen Dizayn Etiket BD. Ltd.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:422'898 bytes
First seen:2020-08-19 13:36:37 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:BO3RJ5BMjuFM+sEB0G9aGd/xNkNjBuHcJ:05BMSFM+dB0G9xxNkvl
TLSH 359423286590FA8E94D002093B77217BC6EF3355C93F1BAF434FDB63A9114934E66693
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: Ruhul Amin <Ruhul.Amin@maheendizaynetiket.com>
Reply-To: evanesultanedeseba@gmail.com
Subject: Purchase Order 650047 Maheen Label Tex Ltd & Maheen Dizayn Etiket (BD.) Ltd.
Attachment: P.O 2553 Maheen Dizayn Etiket BD. Ltd.rar (contains "P.O #2553 Maheen Dizayn Etiket (BD.) Ltd.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5844860ed3a0804f1bd5879031b12387dd15ac0ee5ce7d1b4fed8130ee72de4d/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-19 13:38:46 UTC
AV detection:
15 of 47 (31.91%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lbcimdwtucae6g6vq6iddmjdq7orllao4xhh2g2p5watb3ts3zgq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5844860ed3a0804f1bd5879031b12387dd15ac0ee5ce7d1b4fed8130ee72de4d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 5844860ed3a0804f1bd5879031b12387dd15ac0ee5ce7d1b4fed8130ee72de4d

(this sample)

AgentTesla

Executable exe 430f06d96077c82157c3c74bc6a4ca525d894f09ab2906f08cc8a07fa102d2e3

  
Dropping
MD5 6f0f9621ac5f6181206fa3397f078f12
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 430f06d96077c82157c3c74bc6a4ca525d894f09ab2906f08cc8a07fa102d2e3

Comments