MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 60b9cc4fc0860fbb3ac14eca90e62f542684f3b312d5e8f8e8c9cff2af270d76. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 60b9cc4fc0860fbb3ac14eca90e62f542684f3b312d5e8f8e8c9cff2af270d76
SHA3-384 hash: b4390442d9b920ed82ca68f461618a36e99463763e8a826280a9ac517a50d8b3867309a8ab8de82493a51ac037be0f74
SHA1 hash: 365806f1f15588b4a2ab4b034e5048f64c59184e
MD5 hash: 85c20568032789f57b55d6f7f62a9680
humanhash: oscar-king-double-violet
File name:BANK DOCUMEMT.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:847'872 bytes
First seen:2020-05-27 12:02:21 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:Ui8qmDnPyX8ylwhz8n4l7OUrYqYwYTtlNdUJIP0VCEqHOmAGW0QD1Ij8Ugb0yY+0:DBeyXKx8n4IUrWtVQliTAln1IwlY1x6
TLSH A2059E1EA2E04832FD661A3C9C3BD774582EBE10292859467BE8DD4C9FF935D3C25293
Reporter abuse_ch
Tags:AgentTesla iso


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: info@purilumbung.com
Subject: BANK DOCUMENT
Attachment: BANK DOCUMEMT.iso (contains "BANK DOCUMEMT.exe")

AgentTesla SMTP exfil server:
smtp.pmdpharmatec.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-27 12:35:48 UTC
File Type:
Binary (Archive)
Extracted files:
275
AV detection:
14 of 30 (46.67%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso 60b9cc4fc0860fbb3ac14eca90e62f542684f3b312d5e8f8e8c9cff2af270d76

(this sample)

AgentTesla

Executable exe 86acfdc1c2054a8a0166bcdda996b2d200519b5b9110b1bdec8e3f8318a4fc06

  
Dropping
MD5 805311fae2467ed873dc503d0727db3b
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 86acfdc1c2054a8a0166bcdda996b2d200519b5b9110b1bdec8e3f8318a4fc06

Comments