MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9dd39f6cf93f7f30ec20b2dd86da0d88eab9cc1ed7636ca47c51a1b1078d8474. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9dd39f6cf93f7f30ec20b2dd86da0d88eab9cc1ed7636ca47c51a1b1078d8474
SHA3-384 hash: 574bc9a25177e475ee61b2b195b9ec1824bc00ff63cd9f4ea623b03ccaff34e728474c365de3cbddba90d7dee94dfac0
SHA1 hash: 47d5fdbc3d414c8f412f1250eff49882030d4c66
MD5 hash: 1473931fa0f8d858e245a87526e7caf1
humanhash: don-lion-yellow-five
File name:520065-DOC0000557423-06092020.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:423'421 bytes
First seen:2020-06-09 06:07:49 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:FFfPXoO5AnPAsE29xKN7mA46uqVyUOCgBrVA5de9N04O+BWYTRmNwCcie26dYe:XhQn9UN46xVMBs+045Aw3iF6b
TLSH DE942316453014E7196A6EA601C362A277EFBEB84FFAD27D0C91B8D8F2FD2D302D4611
Reporter abuse_ch
Tags:7z AgentTesla


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: pmg.alpfavill.hu
Sending IP: 217.112.135.207
From: Mustafa Ozilhan <mustafaozilhan02@gmail.com>
Subject: yükleme belgeleri
Attachment: 520065-DOC0000557423-06092020.7z (contains "520065-DOC0000557423-06092020.exe")

AgentTesla FTP exfil server:
ftp.tde.ro:21

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 06:09:04 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=txjz63hzh57tb3bawloynwqnrdvltta625rwzjd4kgq3cb4nqr2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 9dd39f6cf93f7f30ec20b2dd86da0d88eab9cc1ed7636ca47c51a1b1078d8474

(this sample)

AgentTesla

Executable exe e337cef021313425e1bb071d32482f61722d1980e8bb0d2deac6c2cd1f7bce55

  
Dropping
MD5 6ad1eafc2d5fb2e0610154bbdfed5999
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e337cef021313425e1bb071d32482f61722d1980e8bb0d2deac6c2cd1f7bce55

Comments