MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b14620cf7e6f905c6b462a4d6e64b61b3acecba7c55050ad6defc0c96db303ce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b14620cf7e6f905c6b462a4d6e64b61b3acecba7c55050ad6defc0c96db303ce
SHA3-384 hash: 176a01a493e7e3f7e341b699127a674c5dcdf8e0f945f6fc25d33adec829d071f9a43783eeab45822250433343c2ad23
SHA1 hash: 76b9a59ee63b2f006eb7f8f2dff28d14e61f7b58
MD5 hash: b88976ddc6550040b24dfae577313552
humanhash: sierra-victor-virginia-neptune
File name:Original Shipping doc.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:398'257 bytes
First seen:2020-07-02 05:05:22 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:vjt8uUTrgIjKOaIDTczSPKL+QQAC9B9p/1:btTUTrgIjpa2DiqQin
TLSH 79842315761829FCA961DA2C1A6D21CE6BFE004FD753E1CFCF98DDB838EA3452125E18
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: DHL Express<trang.nguyen@unitedcorp.com>
Received: from unitedcorp.com (unknown [37.48.85.217])
Date: 2 Jul 2020 02:01:22 -0700
Subject: FW: Original Shipment Document For Pickup/AWB NO: 907853880911
Attachment: Original Shipping doc.z

Intelligence

File Origin
# of uploads :
1
# of downloads :
94
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b14620cf7e6f905c6b462a4d6e64b61b3acecba7c55050ad6defc0c96db303ce/
Threat name:
Win32.Spyware.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-07-02 05:07:04 UTC
File Type:
Binary (Archive)
Extracted files:
39
AV detection:
18 of 29 (62.07%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=wfdcbt36n6ify22gfjgw4zfwdm5m5s5hyvifblln57ams3ntapha._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z b14620cf7e6f905c6b462a4d6e64b61b3acecba7c55050ad6defc0c96db303ce

(this sample)

AgentTesla

Executable exe 290299b025d885dcb36dd2ce9babc9226c9ff942468a8a6c6ee38cf8a3c00144

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 290299b025d885dcb36dd2ce9babc9226c9ff942468a8a6c6ee38cf8a3c00144
  
Dropping
AgentTesla

Comments