MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f5614f9d157520b2d9786b06afcb6da234780454c5e0290be4b7c55f81fb908. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8f5614f9d157520b2d9786b06afcb6da234780454c5e0290be4b7c55f81fb908
SHA3-384 hash: f1d224e0205a517b0b0fb1dedf2ef9d8768055e18a7c267b007b2f44d93381a54676137dbe1eba06d39cac949c3eb7f2
SHA1 hash: 870d592d61b1d76367372354e55b5f02a4ac7f74
MD5 hash: 1b0ab41d1cdfc0a2a70658fa92425353
humanhash: venus-lamp-carolina-mike
File name:INVOICE_Doc.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'489'584 bytes
First seen:2020-04-08 13:54:02 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:nfQdG5q/yeQw6IhvXrhqp920HDuvx82Kdw318xuapCwRDX+:nfRKhv94Du62zKumCwRi
TLSH D565336CC3D2554F8FA0FB5B2C6919F0491A27F13B63EFEF8B548A16C414898B7B5220
Reporter cocaman
Tags:AgentTesla zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27684.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Trojan.PWS.Stealer.19347.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.21146.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Aitinject
Create hunting rule
Status:
Malicious
First seen:
2020-04-08 14:35:42 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
25 of 46 (54.35%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=r5lbj6ork5jawlmxq2ygv7fw3irupacfjrpafef6jn6fl6a7xeea._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 8f5614f9d157520b2d9786b06afcb6da234780454c5e0290be4b7c55f81fb908

(this sample)

AgentTesla

Executable exe 0e87ab642ed9fa78cc3cf14fc108ce4d5f20c584e363c04a337099101bfc4e37

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0e87ab642ed9fa78cc3cf14fc108ce4d5f20c584e363c04a337099101bfc4e37

Comments