MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69bcc322658e88e1d69e439edc6fbbda67348712a1b86a85f63cda74ebd42d43. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69bcc322658e88e1d69e439edc6fbbda67348712a1b86a85f63cda74ebd42d43
SHA3-384 hash: 0deeb798b6b4e6797b7e476fef76e213b0b0469f30bec83d0607ef89d71223ea1f6310d3df52963d14de7e63c3882c9c
SHA1 hash: fe8a22184c0489ce5c32a5774ae1149723a19d92
MD5 hash: f07228a034ca521be810bb2f41193c0d
humanhash: queen-five-december-double
File name:Proforma Invoice.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:343'192 bytes
First seen:2020-07-23 08:09:38 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:05RsMFzfqE5Aat79TR3Om7p/89lugFkZDjd5ALgV7neuGcAHa0506:0R1zfqE5Aat79ReiSkZDx5SuQR
TLSH 1E74239182BE2C00F45BC1157F25CA4976C0FA326BD16957AA16CBEEC0D77A23787361
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: Bhurgari Dehwar<sales@technomarine.com.sg>
Received: from technomarine.com.sg (unknown [95.211.208.23])
Date: 23 Jul 2020 08:07:46 -0700
Subject: Proforma Invoice
Attachment: Proforma Invoice.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/69bcc322658e88e1d69e439edc6fbbda67348712a1b86a85f63cda74ebd42d43/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-23 08:11:05 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
26 of 48 (54.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ng6mgitfr2eodvu6iopny3533jttjbysug4gvbpwhtnhj26ufvbq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/69bcc322658e88e1d69e439edc6fbbda67348712a1b86a85f63cda74ebd42d43

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 69bcc322658e88e1d69e439edc6fbbda67348712a1b86a85f63cda74ebd42d43

(this sample)

AgentTesla

Executable exe 7fa155eb99d47c1e8374b8bc40050c24a8e18172c7a2db5d777f36b33c297ec6

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7fa155eb99d47c1e8374b8bc40050c24a8e18172c7a2db5d777f36b33c297ec6

Comments