MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a2b0408e38355c5b99182c9a3d6c248ed2942c3454ef7adf0a27141a793a69e0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a2b0408e38355c5b99182c9a3d6c248ed2942c3454ef7adf0a27141a793a69e0
SHA3-384 hash: 938919e9be64b8574dad56cf5701d2051c2ff3e9064a96862036ef8dacb504f670b0529350190fcb6aa9d50060524d9f
SHA1 hash: 51902c48b6e0a58ad5d061c2ab0b7af5a317983a
MD5 hash: 7571eaad34d2929dc979e21b2a9fc053
humanhash: summer-social-equal-utah
File name:final reminder.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:395'233 bytes
First seen:2020-07-16 08:07:22 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:o/F3SNGDcDFixYqvmnI9nYy/5aFF+NVNUJw2Sziejz:od3S8DqSYqvmn61/5VUKiEz
TLSH 9884237473FD9BF3992AC12D05682B426AD61BA5E04F9E11A188C7DAA6BC750C0BF407
Reporter abuse_ch
Tags:AgentTesla gz HostGator


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: gateway32.websitewelcome.com
Sending IP: 192.185.145.187
From: Barr.Klara-Marie Bartels <Solicitors@hgc.com>
Subject: HCG Esq: Outstanding JUN,17 (URGENT)
Attachment: final reminder.gz (contains "final reminder.exe")

AgentTesla SMTP exfil server:
mail.szeklicki.com:587

AgentTesla SMTP exfil email address:
woda@szeklicki.com

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a2b0408e38355c5b99182c9a3d6c248ed2942c3454ef7adf0a27141a793a69e0/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-16 08:09:03 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ukyebdrygvofxgiyfsnd23ber3jjilbuktxxvxyke4kbu6j2nhqa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz a2b0408e38355c5b99182c9a3d6c248ed2942c3454ef7adf0a27141a793a69e0

(this sample)

AgentTesla

Executable exe bacd9f9cb9c0f2ac12f70b61102563449a2ca1de047567c66c6733395ce9200a

  
Dropping
MD5 3caa9f85e3ddcf2d22d832744d16a223
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 bacd9f9cb9c0f2ac12f70b61102563449a2ca1de047567c66c6733395ce9200a

Comments