MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 799a92c73f139faa4ed3b13076dc1b9b983d17d6d95eed284dd360c5920991ca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 File information Yara Comments

SHA256 hash: 799a92c73f139faa4ed3b13076dc1b9b983d17d6d95eed284dd360c5920991ca
SHA3-384 hash: 2ed40d0e5add98d9d43dca1f842c5b04d6d2375cd90ff2c0c08697dddb3fb0aaebb978ed168364ed96b34a8fe8ee5dca
SHA1 hash: 340f599691208c0af73d22e13555d16124d25c7a
MD5 hash: e7fe575d0f6871b324308b31d218c090
humanhash: pip-early-chicken-xray
File name:SKBM 0223.rar
Download: download sample
Signature n/a
File size:387'146 bytes
First seen:2021-02-23 07:24:08 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:elmpLfciXTsggSCERJfvz3PdyYpIpo1HT6VMHnex0zctt33p2s3Vm5ORwAbO4+Ur:LO51LgJHz3XpIpIfzS3p2AVgywAbhD
TLSH AE8423A7F2F09CB73E076DF5B17462950185A9939F2F1C1E294C32360C83A7EDA58395
Reporter @abuse_ch
Tags:rar


Twitter
@abuse_ch
Malspam distributing unidentified malware:

HELO: static.224.7.21.65.clients.your-server.de
Sending IP: 65.21.7.224
From: Ms. Gusti Rudangga <adrjecb@widendeclaration.com>
Subject: Re: Quotation Request (RFQ)
Attachment: SKBM 0223.rar (contains "SKBM 0223.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
62
Origin country :
FR FR
Mail intelligence
Geo location:
Global
Volume:
Low
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-02-23 07:24:33 UTC
AV detection:
7 of 47 (14.89%)
Threat level
  5/5
Threat name:
Malicious File
Score:
1.00

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 799a92c73f139faa4ed3b13076dc1b9b983d17d6d95eed284dd360c5920991ca

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments