MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92d5e8dcca50c4b467ffe375e1859ef1b2851b4f99c9ffe89abd9574a4a00f9c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 2 File information 4 Yara Comments

SHA256 hash: 92d5e8dcca50c4b467ffe375e1859ef1b2851b4f99c9ffe89abd9574a4a00f9c
SHA3-384 hash: 5962353a035810f14214f93f3c8664cea666a61c3f9bde56709a45bb4c50ae3327602e0300dd08deedebb6a03343f9f1
SHA1 hash: 3a2f8ad1440e6141b3b9c5d7785ab5a06ce11aac
MD5 hash: bdf620bd0e79af247c15354834880205
humanhash: network-angel-ceiling-fruit
File name:D55EF95E.rar
Download: download sample
Signature AgentTesla
File size:396'323 bytes
First seen:2020-06-30 05:31:00 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:99wK1gvhyBy1CTpwNEJrzfZoPjzLR4dk5OghcszpPXSD7gXMtQGGLVzvxsAB3P6:L1gvywCTeuJPZKjzLfVQ8M7GLx5sAB3C
TLSH 4F84337B4B6E207D8ED889F4C0D8A0D85C3535A59AF0F27F7DB6E35B9A20214122FD16
Reporter @abuse_ch
Tags:AgentTesla rar


Twitter
@abuse_ch
Malspam distributing AgentTesla:

HELO: server.beeinspire.com
Sending IP: 115.124.125.172
From: Prakash International Pvt. Ltd <r.jadeja@pciplindia.com>
Reply-To: rjadeja-pciplindia@post.com
Subject: Hello Sir/Madam
Attachment: D55EF95E.rar (contains "D9730F87@9F6F0C33.D55EF95E.exe")

AgentTesla SMTP exfil server:
smtp.yandex.com:587

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 1
# of downloads 26
Origin country US US
ClamAV No detection
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/92d5e8dcca50c4b467ffe375e1859ef1b2851b4f99c9ffe89abd9574a4a00f9c/
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 05:32:06 UTC
AV detection:16 of 31 (51.61%)
Threat level:   2/5
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 31.15%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 92d5e8dcca50c4b467ffe375e1859ef1b2851b4f99c9ffe89abd9574a4a00f9c

(this sample)

  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments