MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7d0f9afae7cb3f272b19d111cf050c47f46f53b191a871b538eb591c258407fe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7d0f9afae7cb3f272b19d111cf050c47f46f53b191a871b538eb591c258407fe
SHA3-384 hash: 8ecc957cb8ee02660de422e823d7e7d5150af13c013fe5b1cc84e058b29cf4d043e0112da607ac1dbe57ec070aa4ada5
SHA1 hash: 0836f4bcd43831d515507803ebfd89c910429c21
MD5 hash: 4eb10101911a6ce6d09442802c002a6f
humanhash: chicken-kitten-mars-solar
File name:Quotation for Diepsloot Repairs Project.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:617'603 bytes
First seen:2020-08-17 13:45:00 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:hXMgaHftuS4Yx2EMeBbMVEUiZzy5+s6Ls5v0nAgsmwYkp9lBY5z:hXM1/P4myEbyksBh6sbYkHrM
TLSH 48D42397A21CA6EEA47B0A98B916D90813B47407757324CCE47DF7E0873A3AA0F7E514
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: Monica DOBRE <m.dobre@halleycables.com>
Subject: Quotation for Diepsloot Repairs Project
Attachment: Quotation for Diepsloot Repairs Project.rar (contains "Quotation for Diepsloot Repairs Project.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7d0f9afae7cb3f272b19d111cf050c47f46f53b191a871b538eb591c258407fe/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-08-17 06:45:29 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=puhzv6xhzm7sokyz2ei46bimi72g6u5rsguhdnjy5nmryjmea77a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7d0f9afae7cb3f272b19d111cf050c47f46f53b191a871b538eb591c258407fe

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 7d0f9afae7cb3f272b19d111cf050c47f46f53b191a871b538eb591c258407fe

(this sample)

AgentTesla

Executable exe 2b1b0832a94d3e2a53b597aab9a04130dfaca6dfcbb7dd43f2a6aff5a836ba98

  
Dropping
MD5 c231bb882cbffcc4a7b17afde61283de
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2b1b0832a94d3e2a53b597aab9a04130dfaca6dfcbb7dd43f2a6aff5a836ba98

Comments