MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c92513b4478c441001fbfba8abad12940391edf3bd97e46ca90e5f2f19b34d2f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c92513b4478c441001fbfba8abad12940391edf3bd97e46ca90e5f2f19b34d2f
SHA3-384 hash: a3c06306915b5ef2ec9fec21dddba5b928b82c001261e7650de4fcb6b47f5dcec86bcd6d6af8b565f9de93db5ace5971
SHA1 hash: f15311cc3fddaae9f9e1960a8930ef0a4927bb10
MD5 hash: 86eb9074014ab1d12cfb7e1d59419b58
humanhash: steak-cold-cup-carbon
File name:Ordine 2001056.GZ
Download: download sample
Signature AgentTesla
Create hunting rule
File size:501'432 bytes
First seen:2020-07-13 09:16:41 UTC
Last seen:2020-07-13 09:56:43 UTC
File type: gz
MIME type:application/x-rar
ssdeep 12288:/6biq4nOBPw0J0Sq8NWsFNerMVbP16vNjlPJad5qJ:/6F4nO9t0XCYrMVbP16v8dS
TLSH 76B4232A4C7464C773FAB78833F272E00D54AED4A1B9F03192555D63DA46BA0382DDEE
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c92513b4478c441001fbfba8abad12940391edf3bd97e46ca90e5f2f19b34d2f/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-13 09:18:05 UTC
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zesrhnchrrcbaap37oukxlissqbzd3ptxwl6i3fjbzps6gntjuxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz c92513b4478c441001fbfba8abad12940391edf3bd97e46ca90e5f2f19b34d2f

(this sample)

AgentTesla

Executable exe 33719edd73278cc289278960c045181c39d5c0c1b3b101a2009946473d564d76

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 33719edd73278cc289278960c045181c39d5c0c1b3b101a2009946473d564d76
  
Dropping
MD5 4c8cc9b59cce6e95f78f11b135748bd8

Comments