MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c4b53bc4234caf4e6f562fb19203c326793e354fa6ece0da1b40355c658bca0c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c4b53bc4234caf4e6f562fb19203c326793e354fa6ece0da1b40355c658bca0c
SHA3-384 hash: a2c81f1200043e8e5a738d4842fd555dc3b8f233ef8c40d2876f820b1e1b09954e8859aa0d1edd6733152b51ba306a3c
SHA1 hash: 1f34d622f74a80a67a3441a22148d582646da39b
MD5 hash: 995bf6d4d177f23ab048148174d240fe
humanhash: ack-stairway-fourteen-bravo
File name:OFERTA DE LICENÇA DE COTAÇÃO - OAED_____.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:513'216 bytes
First seen:2020-07-10 17:45:22 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:Rxlq3SAEADkk+ViQ75ytgdpW7qdzYIKR03bNESUZkf0FEd:RHlzADR+VGtg6YYybNyZkHd
TLSH EBB423C5EE80DA9DC451A34BDC4328DEA63580719CF137CF4CD939AA37931D66823D9A
Reporter abuse_ch
Tags:AgentTesla gz


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: mail.doulfis.gr
Sending IP: 136.243.21.153
From: Metalart <info@metalart.gr>
Subject: RE: COTAÇÃO / APRESENTAÇÃO DE COTAÇÃO DE OAED
Attachment: OFERTA DE LICENÇA DE COTAÇÃO - OAED_____.gz (contains "OFERTA DE LICENÇA DE COTAÇÃO - OAED_____.exe")

AgentTesla SMTP exfil server:
smtp.lokalboyz.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c4b53bc4234caf4e6f562fb19203c326793e354fa6ece0da1b40355c658bca0c/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ys2txrbdjsxu432wf6yzea6dez4t4nkpu3wobwq3ia2vyzmlziga._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz c4b53bc4234caf4e6f562fb19203c326793e354fa6ece0da1b40355c658bca0c

(this sample)

AgentTesla

Executable exe dc9ad489e9749a09227c79e5818fb5f3df9eb460bdc4c17e6d1efbe964b8b12f

  
Dropping
MD5 1b128e56a7f0c731b94894be1b3862ef
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dc9ad489e9749a09227c79e5818fb5f3df9eb460bdc4c17e6d1efbe964b8b12f

Comments