MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8c8ecc94eaf07afb3c7b8b2b7425b80e380cdd05406d98e90b1e7c7697cae51e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8c8ecc94eaf07afb3c7b8b2b7425b80e380cdd05406d98e90b1e7c7697cae51e
SHA3-384 hash: 43276a7a303efb4703b85f8b4c301306504576c197a5136067f0640a85eb17aef6fdd23392b400e3c5c943a704fe8116
SHA1 hash: a74521176ab7ca0b10dd0bd4d977c29254df178a
MD5 hash: c3141effab073671dc219e07c311d696
humanhash: september-ack-pizza-river
File name:AWB 80258723268765.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:530'280 bytes
First seen:2020-04-30 12:35:15 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:CEUnRM3rehNi+e/a87aAuR3a1GP/g6NfxPEjfy0TLcsV9M9x:CEURmehNXey8hYa1AbncjfjTLFV9a
TLSH 92B423888A2DA32B1E398D25625A08B1062B0E553BDF2780D8F66DF5777A1304FD3973
Reporter abuse_ch
Tags:AgentTesla zip


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: meomeo.com
Sending IP: 185.35.64.180
From: stanford@markmsmallwood.ml
Reply-To: dhlexpress2111@gmail.com
Subject: AWB: 80258723268765
Attachment: AWB 80258723268765.zip (contains "AWB 80258723268765.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-04-30 13:36:03 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
23 of 48 (47.92%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rshmzfhk6b5pwpd3rmvxijnyby4azxifibwzr2ildz6hnf6k4upa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 8c8ecc94eaf07afb3c7b8b2b7425b80e380cdd05406d98e90b1e7c7697cae51e

(this sample)

AgentTesla

Executable exe 1e7d01a275dca2cd56e384bee72080b9355e720e7ea64ba0ca8d2becb28558de

  
Dropping
MD5 cdc7ab3f444b12605e4d5b78568c2539
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1e7d01a275dca2cd56e384bee72080b9355e720e7ea64ba0ca8d2becb28558de

Comments