MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cf6af87f2e407099f1400f72f6b1158eb99cec9dab8e3073d418b3cb5332932. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8cf6af87f2e407099f1400f72f6b1158eb99cec9dab8e3073d418b3cb5332932
SHA3-384 hash: 4645d0633f3f5c233ed9bc325d4becf3efad4919285c49d6f97c6fb462e32689a01ed88e9456b7b527af2355364b7d4c
SHA1 hash: fddfae8cf66e0fb7a8467b9c0531e80c21e2ce7d
MD5 hash: 2a81346bbb48a90cf9caffe3fd561825
humanhash: florida-kilo-whiskey-green
File name:BASEERA 108756 Quotation Inquiry.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:438'480 bytes
First seen:2020-07-09 11:34:16 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:3Ook1YGpWkWMDswmZds6uzSyEmYi1sdbjQ+Qbstx4W:+nzDYZdouyLY59Ebs/h
TLSH 869423F19F0220E993EDC3F47E7E0E4D841C57CD90647940EA5968C8A7E40B9DD9A3BA
Reporter cocaman
Tags:AgentTesla gz


Avatar
cocaman
Malicious email
From: Nadwa Khairiena Binti <info@ecoassurances.com>
Received: from ecoassurances.com (static.235.246.202.116.clients.your-server.de [116.202.246.235])
Date: 09 Jul 2020 04:00:12 -0700
Subject: BASEERA 108756 Quotation Inquiry
Attachment: BASEERA 108756 Quotation Inquiry.gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8cf6af87f2e407099f1400f72f6b1158eb99cec9dab8e3073d418b3cb5332932/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-09 11:35:48 UTC
File Type:
Binary (Archive)
Extracted files:
67
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rt3k7b7s4qdqthyuad3s62yrldvzttwj3k4ogbz5igftznjtfeza._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 8cf6af87f2e407099f1400f72f6b1158eb99cec9dab8e3073d418b3cb5332932

(this sample)

AgentTesla

Executable exe 06c57d4b322f81ecbab54213b8850ecd29408f5ca5814641927cd5c5c3acb892

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 06c57d4b322f81ecbab54213b8850ecd29408f5ca5814641927cd5c5c3acb892
  
Dropping
AgentTesla

Comments