MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c3bfa4d65680c2fa3092995869adeb074cc9ec1ac85ffe996fc337c435390765. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c3bfa4d65680c2fa3092995869adeb074cc9ec1ac85ffe996fc337c435390765
SHA3-384 hash: 75a4b941649a805380823edbf2f5514b995d01ff34bb9a49bc5ebed40387ee3be6edba73d406264679d70c5924d50a20
SHA1 hash: 0de81c968a7025bd5dc93b854fd3b9fdc0394368
MD5 hash: 915503db70f643e59112094388f0dcec
humanhash: timing-football-march-delaware
File name:POP.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:460'800 bytes
First seen:2020-06-15 09:00:03 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:RI38txSMeD1nQTJwvtuG5H8fj6oqfIctpmFV:RIMz/eUJPfjRqfIymb
TLSH D4A402097BAC6751C27D46B59AFA258017B758A11A32F34E7ACC762C1F63BE18313707
Reporter cocaman
Tags:AgentTesla img


Avatar
cocaman
Malicious email
From: broker@laurakaplanrealty.com
Received: from laurakaplanrealty.com (unknown [193.142.59.71])
Date: 15 Jun 2020 01:56:31 -0700
Subject: Proof of Transfer Payment for Purchased Property
Attachment: POP.img

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.34016426.19424.29719.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 09:01:03 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yo72jvswqdbpumestfmgtlpla5gmt3a2zbp75glpym34injza5sq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img c3bfa4d65680c2fa3092995869adeb074cc9ec1ac85ffe996fc337c435390765

(this sample)

AgentTesla

Executable exe d8ed9abd08ab762bf0c6f98be9d503105b2b305ff8baf9f50ebfebf65074a4f8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d8ed9abd08ab762bf0c6f98be9d503105b2b305ff8baf9f50ebfebf65074a4f8
  
Dropping
AgentTesla

Comments