MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 907678ec30cd37c08e24de9031e5e7cf1e75c89d867eb0f402e40857e49833b9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 907678ec30cd37c08e24de9031e5e7cf1e75c89d867eb0f402e40857e49833b9
SHA3-384 hash: 372a5ae71dafa342fb0b298483b3702bdcd038b5a57b34f7efa02ea350cfa2bab52d592048eb1dee67a3315cea3f82e1
SHA1 hash: 64c05957552d049c5e47145b1972248d7718e3c1
MD5 hash: 87c136997863d50d598f3759658047e1
humanhash: leopard-blue-mango-freddie
File name:Inquiry_CQU-2--255-E.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:514'099 bytes
First seen:2020-06-29 04:02:45 UTC
Last seen:2020-06-29 04:14:50 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:ECHhktdBAHL8LPGYae/rMcosm7FaeApCS51ywvhGAp+GbPkz:PQAr8L5D1mCpCUxhp+Dz
TLSH ECB423C9FDA827027FCBA6D39CDEE0C72D90455B8DA3B5E09D40FD2F60284616F92952
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/907678ec30cd37c08e24de9031e5e7cf1e75c89d867eb0f402e40857e49833b9/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 04:04:05 UTC
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sb3hr3bqzu34bdre32iddzphz4phlse5qz7lb5ac4qefpzeygo4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 907678ec30cd37c08e24de9031e5e7cf1e75c89d867eb0f402e40857e49833b9

(this sample)

AgentTesla

Executable exe 0a106a923ee9a6a55513751399bae618ec9f0a11dce7d2a82c73eba8583f2b92

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0a106a923ee9a6a55513751399bae618ec9f0a11dce7d2a82c73eba8583f2b92
  
Dropping
MD5 9c204563f9f18d3080e6df6316c75d15

Comments