MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a80f335b02337fed953f0b97fa52806603645fa8b692f4e2e399d320750ac950. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a80f335b02337fed953f0b97fa52806603645fa8b692f4e2e399d320750ac950
SHA3-384 hash: b1af879827aaf47d5f2141c3ae6d00338543a1f04d96997a650550f18b7bae3d7a7a3a595da6b3c7316f05d8ac45f0b9
SHA1 hash: 402c3de7e1c0c757c4a630ce70750865d36a7e1b
MD5 hash: 8bfdc08f934bcc90b7bf881d7b2f5423
humanhash: juliet-leopard-ohio-kansas
File name:TELEGRAFIC TRANSFER PAYMENT.XZ
Download: download sample
Signature AgentTesla
Create hunting rule
File size:417'750 bytes
First seen:2020-07-03 05:38:39 UTC
Last seen:Never
File type: xz
MIME type:application/x-rar
ssdeep 12288:tIsdY9R6fcNv6Bax8vZ3F59k54JaeJo9x:tnYFQM6B3FTkKaeJo3
TLSH 319423395EDB46927086047DA6871D8D3CB71A860E2F3FA00383E5A463DD916385B7BE
Reporter cocaman
Tags:AgentTesla xz


Avatar
cocaman
Malicious email
From: service@gsgefargut.de
Received: from host.findingtalent.net (host.findingtalent.net [69.16.227.88])
Date: Thu, 02 Jul 2020 19:56:04 -0400
Subject: RE:TELEGRAFIC TRANSFER PAYMENT
Attachment: TELEGRAFIC TRANSFER PAYMENT.XZ

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a80f335b02337fed953f0b97fa52806603645fa8b692f4e2e399d320750ac950/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 05:40:06 UTC
File Type:
Binary (Archive)
Extracted files:
355
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=vahtgwycgn763fj7bol7uuuamybwix5iw2jpjyxdthjsa5ikzfia._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

xz a80f335b02337fed953f0b97fa52806603645fa8b692f4e2e399d320750ac950

(this sample)

AgentTesla

Executable exe 9eb1f39ae32ed2c3289f148c0182ef2f8916fe7283400fcffd262798c08ded91

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9eb1f39ae32ed2c3289f148c0182ef2f8916fe7283400fcffd262798c08ded91
  
Dropping
AgentTesla

Comments