MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 791b8f1b01a29fafe2a73b2a702d0c0e9f1e0335f6e39f70fa488459982e33cf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 791b8f1b01a29fafe2a73b2a702d0c0e9f1e0335f6e39f70fa488459982e33cf
SHA3-384 hash: cc3e41b53e3834dde1629f9caed1d0a6f6d785b1fecffb446b2605b3bed2e246387134a6138e9e7ce3078380005480a5
SHA1 hash: a1d3a00dba88c8a3f26dfcd95ceed42a3a771110
MD5 hash: 5400a01bdb6376aad3191b1bde1f4381
humanhash: ink-asparagus-fourteen-charlie
File name:SOA.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:417'717 bytes
First seen:2020-06-08 05:44:23 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:UiPKVfhOnbrrbBnikIVy9JUWWGSe3TfcbaTRSO6R0TNixbeaO7Gu:RPKVfAnbrrbZikOWW1e3TkbAzji5uP
TLSH FE9423BF1D89ED7D7A0C19EA2D15C6C69EF2924DBCA3AC2609D453520CD45C3C993C3A
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: delmas>hka.delmashk@delmas.com
Received: from delmas.com (unknown [103.151.124.95])
Date: 07 Jun 2020 20:13:47 -0700
Subject: Re: Revised statement of account
Attachment: SOA.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-07 22:38:08 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=peny6gybukp27yvhhmvhalimb2pr4azv63rz64h2jccftgbogphq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 791b8f1b01a29fafe2a73b2a702d0c0e9f1e0335f6e39f70fa488459982e33cf

(this sample)

AgentTesla

Executable exe d92dcda06015bc3d7dc48098eee32a8e77b6b387790abefbff55cad7ff44fca3

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d92dcda06015bc3d7dc48098eee32a8e77b6b387790abefbff55cad7ff44fca3
  
Dropping
AgentTesla

Comments