MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c24c6fa39e7287fbb1f3684e78da43964de89e4c4d8f3d0f849c120e274976ca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c24c6fa39e7287fbb1f3684e78da43964de89e4c4d8f3d0f849c120e274976ca
SHA3-384 hash: 48afb36f1d10d5aa5c7de4a0efb56226dac6fb385b46f13582b674e75ba85b87321b04862d5ece4d22815535b3e85d98
SHA1 hash: 740c330e06c8f5571f46c519dfaa4aa2c0631766
MD5 hash: 850b1bc7107c139e435aa4643cea65ad
humanhash: spring-beer-may-summer
File name:BL Draft Packing List Delivery No. 00802.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:429'053 bytes
First seen:2020-05-12 16:15:42 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:YLarc3S2v23mMFIePIscZFfcVefQFCaAq/5GEw1084PNdfi:QagI3WePIsc37baAvF1doN9i
TLSH 6F9423993369247DD185A8107B4DDFE4A90FDA638D19502ADAFB333464CCAC2B733709
Reporter abuse_ch
Tags:AgentTesla gz


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: mailhost.unireka.com
Sending IP: 118.100.111.134
From: JURUBINA MISRA (AGENT) <jurubina@unireka.com>
Subject: B/L Draft & Packing List // Delivery No. 00802
Attachment: BL Draft Packing List Delivery No. 00802.gz (contains "BL Draft & Packing List Delivery No. 00802.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 16:37:10 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yjgg7i46okd7xmptnbhhrwsdszg6rhsmjwht2d4etqja4j2jo3fa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz c24c6fa39e7287fbb1f3684e78da43964de89e4c4d8f3d0f849c120e274976ca

(this sample)

AgentTesla

Executable exe a452cdb62ce6e25a0202e638112c3837fcd9fc7eb9b8d21b49fac3da79d2e27a

  
Dropping
MD5 3da93a3850d33ec27917bccde4b314b5
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a452cdb62ce6e25a0202e638112c3837fcd9fc7eb9b8d21b49fac3da79d2e27a

Comments