MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 59ac2a32ceebb3ed0b3714a6c2e6f78e6cb7bcec2d63a84dc47ffa5306b557c7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 59ac2a32ceebb3ed0b3714a6c2e6f78e6cb7bcec2d63a84dc47ffa5306b557c7
SHA3-384 hash: ae4d62b9d12bb95e2924fa785a0a86aeb2d48cc28341a84a8cadcb92681db5284535d4cf1c3b808faf040ed31d45e941
SHA1 hash: bbee87164215cbcff02d7872027de31dae082798
MD5 hash: ae9392a11fa9eaa361551cccc5e3686a
humanhash: music-stairway-cardinal-delaware
File name:Inquiry.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:526'336 bytes
First seen:2020-06-08 13:29:01 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:2epFFrke+vdVbMTc+GrfIHNo3lksg6oiJKGSD20:NFpeVVwTcrfItGg6LJKD
TLSH D9B4128122E94722D53D8BF9B161A54083F6B716A776F72D3CCDB1EE0B837400A51B9B
Reporter abuse_ch
Tags:AgentTesla iso


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: asentics.de
Sending IP: 104.36.229.110
From: ASENTICS <info@asentics.de>
Subject: Wholesale Inquiry
Attachment: Inquiry.iso (contains "Inquiry.exe")

AgentTesla SMTP exfil server:
mail.privateemail.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKDZ.67676.17012.20388.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-08 11:03:37 UTC
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lgwcumwo5oz62czxcstmfzxxrzwlpphmfvr2qtoep75fgbvvk7dq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso 59ac2a32ceebb3ed0b3714a6c2e6f78e6cb7bcec2d63a84dc47ffa5306b557c7

(this sample)

AgentTesla

Executable exe 624f28baa59d06a15c31280a4ab8210f55459da1a876386d47589c9b6d46b5ec

  
Dropping
MD5 1c35725dc0e47187bc785757adcdd4fd
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 624f28baa59d06a15c31280a4ab8210f55459da1a876386d47589c9b6d46b5ec

Comments