MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 588c150c253a587f9b9be9a358c02756d6364819ff3dd0083c82d60047669f79. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 588c150c253a587f9b9be9a358c02756d6364819ff3dd0083c82d60047669f79
SHA3-384 hash: 9a18011178c75b72308b365c32e4bf97d06fb45b72ee1289862554dc3264abf1cae1fa9b34e6c61b3614b0e30e44e9f7
SHA1 hash: 1a327485e734b5e5abf59fef0362b4386f54d991
MD5 hash: 8c535b2c22d1f80293a0c5303f187b12
humanhash: william-oklahoma-papa-pip
File name:SIEMENS 3RT2024-1BG40_datasheet_en.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:602'112 bytes
First seen:2020-05-21 09:04:08 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:k49pvdR1M0tPCm41lDnWnAMXEd0O4vuzU:kuzaoCm4/nMXab4vkU
TLSH 21D41215BBFE1B14E6B98BF0097465406377772B5834E35C6E5A71CE2B32B00A680F63
Reporter cocaman
Tags:AgentTesla img


Avatar
cocaman
Malicious email
From: Business Coordinator <a.banat@waveautomations-sa.com>
Received: from waveautomations-sa.com (unknown [185.222.58.111])
Date: 21 May 2020 00:13:33 -0700
Subject: RFQ (4500387098)
Attachment: SIEMENS 3RT2024-1BG40_datasheet_en.img

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PWS.Siggen2.49161.17281.31491.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-21 07:20:19 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
14 of 31 (45.16%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lcgbkdbfhjmh7g435grvrqbhk3ldmsaz7465acb4qllaar3gt54q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 588c150c253a587f9b9be9a358c02756d6364819ff3dd0083c82d60047669f79

(this sample)

AgentTesla

Executable exe b7f8ca6215aa2beba2bc30780a8df2618a117ec958319a8b139bdca2480a879c

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b7f8ca6215aa2beba2bc30780a8df2618a117ec958319a8b139bdca2480a879c
  
Dropping
AgentTesla

Comments