MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f7c9e9d4630cb82532008c0e1e0da1f21deb4bd5acb3ffd3722b36b7678c0e3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7f7c9e9d4630cb82532008c0e1e0da1f21deb4bd5acb3ffd3722b36b7678c0e3
SHA3-384 hash: 736ee619913ab4738d92fd522a8c6db531d34da8391c8365e9a30ec0dfd220a182d772f6f5e7ce13a46f5e3f7e7f44ef
SHA1 hash: 86d68ce6389f494ae7bf1c6d77209b7bba50818f
MD5 hash: 357b3d2d1c4361e3490e9d4933f0996a
humanhash: enemy-magazine-orange-timing
File name:swift 000394893903_06-30-2020.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:406'184 bytes
First seen:2020-06-30 05:34:47 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:T0gXwv4kZP1Pi+PpDlEa3/Wss3bcXTxhcAbSb9re4TQ0EhhxYW7ufrWtV/kVN3A:T1XOZAC9Ga3/WzLcDxzAT5Ehz/kDA
TLSH 738423D93D741B86B90C8E1F6DBA3C94F9466D669AA489803C6098C6C0F729BCDD31C3
Reporter abuse_ch
Tags:7z AgentTesla


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: fosetico.com
Sending IP: 109.228.8.101
From: Anthoni Widodo <anthoniwidodo2@aol.com>
Subject: Pembayaran
Attachment: swift 000394893903_06-30-2020.7z (contains "swift 000394893903_06-30-2020.exe")

AgentTesla SMTP exfil server:
mail.protege.com.mx:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7f7c9e9d4630cb82532008c0e1e0da1f21deb4bd5acb3ffd3722b36b7678c0e3/
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-06-30 05:36:04 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=p56j5hkggdfyeuzabdaodyg2d4q55nf5llft77jxekzww5tyydrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 7f7c9e9d4630cb82532008c0e1e0da1f21deb4bd5acb3ffd3722b36b7678c0e3

(this sample)

AgentTesla

Executable exe 5e75bcc407b1263e3d3d72f2262d16a48b456103c9078eeff72159c29800eaf9

  
Dropping
MD5 6f91140fa0d68de6d62259cba6589a8e
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5e75bcc407b1263e3d3d72f2262d16a48b456103c9078eeff72159c29800eaf9

Comments