MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9851049b3debc71356b3a53c8e60e2a831aa1d5cfad9434e715ff6083cd74e54. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9851049b3debc71356b3a53c8e60e2a831aa1d5cfad9434e715ff6083cd74e54
SHA3-384 hash: f984af4ecf3c02e4303690825a5e534b1f3cf005d1b2782ef545409357bd1b5f992b0905451e76bf52192de2b1546e7d
SHA1 hash: 3be77c92cc0e6fc9697be399f1b27dd7052d7e26
MD5 hash: 4f64ac83fd620c36e6b27b4ed8234a19
humanhash: glucose-table-white-carolina
File name:Company profile new.pdf.001
Download: download sample
Signature AgentTesla
Create hunting rule
File size:400'892 bytes
First seen:2020-05-20 04:21:15 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:IJyWAL+6HfZZZUiXBawAM0Mr2sq/L/0prirw0mZsQ:MALTjOUaW0MS/Mruw0mZsQ
TLSH 2784239BAC3905B50C085370F4082A742ABBB82A5F7E6EC76B015DFD47748E3ED84AD5
Reporter cocaman
Tags:001 AgentTesla


Avatar
cocaman
Malicious email
From: Nabeel Mahmood <nabeeldxb@almullagroup.com>
Received: from almullagroup.com (unknown [209.58.149.76])
Date: 19 May 2020 18:52:41 -0700
Subject: COMPANY PROFILE - HVAC PRODUCT SUPPLIER
Attachment: Company profile new.pdf.001

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-20 05:23:16 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=tbiqjgz55pdrgvvtuu6i4yhcvay2uhk47lmugttrl73aqpgxjzka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 9851049b3debc71356b3a53c8e60e2a831aa1d5cfad9434e715ff6083cd74e54

(this sample)

AgentTesla

Executable exe 2364247c3aeffef1ab3a097e386e61917c7083f53e016888d5c450e9f1c656ac

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2364247c3aeffef1ab3a097e386e61917c7083f53e016888d5c450e9f1c656ac
  
Dropping
AgentTesla

Comments