MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 831ffdfc6a49e2b4439b2aa6a081d30f796e2493da2971b9225084b9a353f2d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 831ffdfc6a49e2b4439b2aa6a081d30f796e2493da2971b9225084b9a353f2d7
SHA3-384 hash: 3b50259f3f4bd4b8b032aca4eb0bbdcbeb5ad5ea18908a1ea8f4c6ffb280368ae3cde13729936c67e95b28f710822bf9
SHA1 hash: 682a773bc8a10353db12730236eebadf78f15591
MD5 hash: b4de95a125047363ea2ff337281ebfa0
humanhash: uranus-oven-nine-nevada
File name:Universal310820.Z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:486'080 bytes
First seen:2020-08-31 10:26:13 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:rsxloKh+ATuHZD2ltjuNQqX7Du3t2c796ugxhwpE:raMBdNQZncugxSpE
TLSH EFA423C9924BF90B2AD517CF6A343C0DE6AFB5D7A6598083B998F0F1B0ED60C1E8C455
Reporter abuse_ch
Tags:AgentTesla z


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: abaad.com
Sending IP: 37.49.230.200
From: Syamkumar Korat <syam.kumar@abaad.com>
Subject: Bank Transfer Advice
Attachment: Universal310820.Z (contains "Universal310820.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/831ffdfc6a49e2b4439b2aa6a081d30f796e2493da2971b9225084b9a353f2d7/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qmp737dkjhrliq43fktkbaotb54w4jet3iuxdojckcclti2t6llq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/831ffdfc6a49e2b4439b2aa6a081d30f796e2493da2971b9225084b9a353f2d7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 831ffdfc6a49e2b4439b2aa6a081d30f796e2493da2971b9225084b9a353f2d7

(this sample)

AgentTesla

Executable exe 14c779eb9e7f6a3a77a4e0df7a8b64d7a74f7db8a7dede57dc5ce8936b83f5df

  
Dropping
MD5 40ba7010a0852fefefe78e0f414f303c
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 14c779eb9e7f6a3a77a4e0df7a8b64d7a74f7db8a7dede57dc5ce8936b83f5df

Comments