MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a44c98ec05b3ba8f1d8ed3477dc31ef4223b26c48bb9b9ea27e7f319226b9673. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a44c98ec05b3ba8f1d8ed3477dc31ef4223b26c48bb9b9ea27e7f319226b9673
SHA3-384 hash: 4e2a8b002d70fff8928b52c8ce02d93319db0a0add833cebd53046c45637a78f2460a48c06e0f0fce00dd02e53e297b5
SHA1 hash: 67dfb05d11a90c47e0477514aec0f56b343859e8
MD5 hash: 44dd191681b95f0718fb4c959138237c
humanhash: carbon-georgia-nevada-massachusetts
File name:Inquiry.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:477'027 bytes
First seen:2020-06-03 06:10:00 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:z8SwH7C9dNH9QAMBvZHL7sBlFsqwdIgU0vEr:zMmtdhMRZrKlFsqVZ0sr
TLSH 3CA423868FD63DD65A03BE38F894511F031B65AE7924B14BCB8A3D17BD8831B7B0417A
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: Accounts Department <rud-division@alkuhaimi.com>
Received: from alkuhaimi.com (unknown [37.48.85.217])
Date: 2 Jun 2020 21:09:22 -0700
Subject: New Inquiry: RFQ.NO_8877
Attachment: Inquiry.pdf.z

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 03:18:14 UTC
File Type:
Binary (Archive)
Extracted files:
1
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=urgjr3afwo5i6hmo2ndx3qy66qrdwjwero43t2rh47zrsitlszzq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z a44c98ec05b3ba8f1d8ed3477dc31ef4223b26c48bb9b9ea27e7f319226b9673

(this sample)

AgentTesla

Executable exe 3c9e6cd86a00b28a9328e16460b34ae3d40f44787c231986a2096360f2724957

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3c9e6cd86a00b28a9328e16460b34ae3d40f44787c231986a2096360f2724957
  
Dropping
AgentTesla

Comments