MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8af7176b98ab8b5d4150215c0a3ea481e10e895c1547ae03d46dc9c0348ed3e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8af7176b98ab8b5d4150215c0a3ea481e10e895c1547ae03d46dc9c0348ed3e7
SHA3-384 hash: 4678edbb0de447d9a3fefc2bb05b9d4a8fd5b780d20efc136422df2748c6c4a27da16a56bd81bcb9371fb199111118f5
SHA1 hash: 51d1afd3358f34e3b3a5cf453b8b0ed112be63e0
MD5 hash: 041a33c9263e5a2a464d18877320d52b
humanhash: two-louisiana-sierra-emma
File name:Invoices.93030030030030.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'222'526 bytes
First seen:2020-04-28 17:20:18 UTC
Last seen:2020-04-29 05:57:57 UTC
File type: rar
MIME type:application/x-rar
ssdeep 24576:8/kNjSodbvn1gMV3bp4ruHy0q1/R+8X4x0DWsLMxQWbs9VJ8hSr:8/kMUveXruS0q1/NU0KocQWKJ8hSr
TLSH 5F45333D2DA8502673721E4BB7F886F452963AD4A83D9B225034AE5CCB0F867540EFE4
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: "jean kepp"<info@ergocnc.gr>
Received: from server.allxo.com (server.allxo.com [50.116.103.43])
Date: Tue, 28 Apr 2020 10:12:19 -0700
Subject: AW:AW: INVOICE + PACKING LIST
Attachment: Invoices.93030030030030.rar

Intelligence

File Origin
# of uploads :
2
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Predator
Create hunting rule
Status:
Malicious
First seen:
2020-04-28 17:35:26 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rl3ro24yvofv2qkqefoaupveqhqq5ck4cvd24a6unxe4aneo2ptq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 8af7176b98ab8b5d4150215c0a3ea481e10e895c1547ae03d46dc9c0348ed3e7

(this sample)

AgentTesla

Executable exe 16f44b280743dcc007ceba8f952491a40750f3bf51a3d034baf2ad989814e730

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 16f44b280743dcc007ceba8f952491a40750f3bf51a3d034baf2ad989814e730

Comments