MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f7f92cc54ce8560606bfb1ac0a7ecfe7ea274c395b684e1a2567e7ab18f74cf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8f7f92cc54ce8560606bfb1ac0a7ecfe7ea274c395b684e1a2567e7ab18f74cf
SHA3-384 hash: ce64aec032ae2c1652868c2a7ad429ba256ba704559fa899b7276eb86e25ad0a53f7a7daaee9120c4f8cfc468c8e8120
SHA1 hash: 4ed3d0815debd02ff271f7e72a668987fdc239a2
MD5 hash: 76f70fa809dc17ccabadec5817a1547a
humanhash: speaker-november-crazy-lake
File name:PI 2020721233.uue
Download: download sample
Signature AgentTesla
Create hunting rule
File size:453'064 bytes
First seen:2020-07-15 13:18:56 UTC
Last seen:Never
File type: uue
MIME type:application/x-rar
ssdeep 12288:e1+GdD0vyz42xGfkGqxLeE8kBILDehuJv:dGWq9jx3wDehO
TLSH 99A42317F34ECAA30DF2109C8889D21653CA59F85D74E4E8B27BF6372F901868EE54D6
Reporter cocaman
Tags:AgentTesla uue


Avatar
cocaman
Malicious email
From: david@dingshengpipe.com
Received: from gamm.duckdns.org (gamm.duckdns.org [185.227.108.149])
Date: Wed, 15 Jul 2020 13:49:25 +0200
Subject: Urgent Re: bank confirmation
Attachment: PI 2020721233.uue

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8f7f92cc54ce8560606bfb1ac0a7ecfe7ea274c395b684e1a2567e7ab18f74cf/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-15 13:20:06 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=r57zftcuz2cwaydl7mnmbj7m7z7ke5gdsw3ijynckz7hvmmpothq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

uue 8f7f92cc54ce8560606bfb1ac0a7ecfe7ea274c395b684e1a2567e7ab18f74cf

(this sample)

AgentTesla

Executable exe 4d3921886e9f29681da48f378e792b39d307a1c3e39730993e60375b1007d87e

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4d3921886e9f29681da48f378e792b39d307a1c3e39730993e60375b1007d87e
  
Dropping
AgentTesla

Comments