MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f450e898b44156719e50f2d0753dc257099753f9d847762d00a75fcdc687173. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7f450e898b44156719e50f2d0753dc257099753f9d847762d00a75fcdc687173
SHA3-384 hash: 89643d9cdf79ccabd8e73a930fef7d8676ffbb179d47ca405ea91845a1e7972251a5a189898fd9599c90ecbb5fe59a73
SHA1 hash: bc36984acdd1b431f9e25d32b0f96d5bd3a9ba06
MD5 hash: 51517a417ed767183174c1855331d51c
humanhash: ack-kitten-pip-uncle
File name:Product Lists.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:388'865 bytes
First seen:2020-04-01 12:13:58 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:/E3a03fEz4j8BYSyGDMGpJJ2f8fMgM7HmP0A/7TIAlbpJXzoo8/dswz9MsG:+a0Pi44BjDfk8fbM7xiwAlbpJXcbdsw4
TLSH C0842301EFAB649F04040D3A9BBABBEDC4D60F237C67909F8B39697126E544B40D12A7
Reporter abuse_ch
Tags:AgentTesla COVID-19 zip


Avatar
abuse_ch
COVID-19 themed malspam distributing AgentTesla:

HELO: mx3.bangla.net
Sending IP: 203.188.252.14
Sender: U.S. Department of Health & Human Services <br4656@bangla.net>
Subject: URGENT NEED: U.S. Department of Health & Human Services/COVID-19 Face Mask/ Forehead thermometers
Attachment: Product Lists.zip (contains "Product Lists.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PWS.Siggen2.46074.23117.32657.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Frs
Create hunting rule
Status:
Malicious
First seen:
2020-04-01 02:23:22 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
20 of 47 (42.55%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=p5cq5cmliqkwogpfb4wqou64evyjs5j7twchoywqbj27zxdiofzq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 7f450e898b44156719e50f2d0753dc257099753f9d847762d00a75fcdc687173

(this sample)

AgentTesla

Executable exe 2a76e8e63c85e8208a612cabae9e348dedbbd5c15b2bd71969d65f83e2e70828

  
Dropping
MD5 bf177f8774b87b297f94db8f28b4bde2
  
Dropping
SHA256 2a76e8e63c85e8208a612cabae9e348dedbbd5c15b2bd71969d65f83e2e70828
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2a76e8e63c85e8208a612cabae9e348dedbbd5c15b2bd71969d65f83e2e70828

Comments