MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6c0a0aba94969c1fc31602d00b27a3eaac92eb197b607b42f140cebf02317d1a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6c0a0aba94969c1fc31602d00b27a3eaac92eb197b607b42f140cebf02317d1a
SHA3-384 hash: 04f6f2ad41b2032ebf3fc899f2cf2c32e9fd01bea2f47438f02c7ed34dc849bbbf6e18600f74fdadb838ad9acc922d66
SHA1 hash: 6d8b8d24cb9f61d0fde4701896e707a6ec64091b
MD5 hash: 4c22d9c6db9728ba4d17449ce936cf54
humanhash: grey-illinois-video-mountain
File name:Order.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:406'771 bytes
First seen:2020-06-04 10:00:15 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:Fe/clwqr7A/9BWxDsNAwHFqqfqmYw5KdtI:FTPAeQNAwlCw5+I
TLSH 508423FDA3900A35B445961CBC2BB8BDE0BDAE801A517B2FC51E55BC12D3EB8A973405
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: ashokkumar <ashokkumar@alkuhaimi.com>
Received: from alkuhaimi.com (unknown [37.48.85.217])
Date: 4 Jun 2020 09:57:44 -0700
Subject: Order [SHIPPING DOC] 20151028-9000078000
Attachment: Order.pdf.z

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 18:06:11 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=nqfavouus2ob7qywaliawj5d5kwjf2yzpnqhwqxridhl6arrpuna._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 6c0a0aba94969c1fc31602d00b27a3eaac92eb197b607b42f140cebf02317d1a

(this sample)

AgentTesla

Executable exe 2139c12a20688b17d559eab390830bf9a941bce614049740156920cb071e75e9

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2139c12a20688b17d559eab390830bf9a941bce614049740156920cb071e75e9
  
Dropping
AgentTesla

Comments