MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5f9d57748aba91d8c12a2332b242ad60434c69ed87b993ed2093e10109bf211a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5f9d57748aba91d8c12a2332b242ad60434c69ed87b993ed2093e10109bf211a
SHA3-384 hash: a1c4f8fa51441b4adc10c98b569f1ce77d70f6b44ce327b4f956e3e5047788b9b686bae22e8d6a7b6c67fc1528daf312
SHA1 hash: ff962b36a5460bac98abffea6519174f6ac3b2cd
MD5 hash: a9389fcb5708d426db9284e47b530a23
humanhash: neptune-sink-snake-thirteen
File name:NEW ORDER.Z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:442'230 bytes
First seen:2020-04-20 08:24:14 UTC
Last seen:2020-04-21 08:38:49 UTC
File type: z
MIME type:application/x-rar
ssdeep 12288:he4yHOqszTdJOijv8g4CwTiDuIvxiGgiv:o44szTXNP4CtT
TLSH 8F94232FA61C897251F07DD5BF413B32FD8E75AD8D8A10166AC0435B4B2B312BDCAE46
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: Rita<info@saintfine.com>
Received: from saintfine.com (unknown [212.83.46.23])
Date: 21 Apr 2020 01:11:24 -0700
Subject: PAYMENT CORRECTION.

Intelligence

File Origin
# of uploads :
4
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27360.Rar5Heur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.23628.RarHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-04-20 08:35:22 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
22 of 31 (70.97%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=l6ovo5ekxki5rqjkemzleqvnmbbuy2pnq64zh3jaspqqccn7eena._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 5f9d57748aba91d8c12a2332b242ad60434c69ed87b993ed2093e10109bf211a

(this sample)

AgentTesla

Executable exe f875b63a737551156a8c5be8e14ca8952f5867e02b9745dbbf833326fc5d5cd1

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f875b63a737551156a8c5be8e14ca8952f5867e02b9745dbbf833326fc5d5cd1

Comments