MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aff3bdc0d84db226fcdbeb0bbee7eaf4c9d63ed16edc6fbaf805008ae70d7fce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: aff3bdc0d84db226fcdbeb0bbee7eaf4c9d63ed16edc6fbaf805008ae70d7fce
SHA3-384 hash: 36931d6211fd5c6b4e30344e0e30c69565ec2e268787509b4d24dc153d94b00bc719e168c56d038b809db8cc99d25a4e
SHA1 hash: 96c26a53c0edf0d19d009490382689e6463b1e49
MD5 hash: 5e976112ba9f4c7837fae58f407d0f9b
humanhash: cardinal-magnesium-nebraska-connecticut
File name:Ticari Hesap Özetiniz.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:403'721 bytes
First seen:2020-05-25 08:21:22 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:zDfkRNmAc2DLv01uMg7E+FwqJdT2cyEz4l3QySlH5QSth6zjIGZKkTP+w6hl9hRN:vkXmAlLIqtIEz4BmH57tA/4wO7v
TLSH BF84238273E2C1F335ADB6023F4860387B4F485E92A23886796E81574953BCC75F9A9C
Reporter abuse_ch
Tags:AgentTesla Akbank geo rar TUR


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: ocarrig.servidoresdedicados.com
Sending IP: 31.24.154.186
From: Akbank Ticari Bankacılık <ticaribankacilik@bilgi.akbank.com>
Subject: MAYIS 2020 Ticari Hesap Özetiniz (Ref:2027552395)
Attachment: Ticari Hesap Özetiniz.rar (contains "Ticari Hesap Özetiniz.exe")

AgentTesla SMTP exfil server:
mail.pkstyles.pk:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27382.Rar5Heur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-05-25 08:36:20 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
17 of 48 (35.42%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar aff3bdc0d84db226fcdbeb0bbee7eaf4c9d63ed16edc6fbaf805008ae70d7fce

(this sample)

AgentTesla

Executable exe 9dea19fca6ee54e793a188210ac187cd534c4c057f82e4141e5d3e87816e9542

  
Dropping
MD5 d9853416af9ff38ae748c4b28c2c960e
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9dea19fca6ee54e793a188210ac187cd534c4c057f82e4141e5d3e87816e9542

Comments