MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cbbfabef867d1fe5dee8501f3dffdb4e72cc51d379cd9ab12dd412fd59035e86. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cbbfabef867d1fe5dee8501f3dffdb4e72cc51d379cd9ab12dd412fd59035e86
SHA3-384 hash: a081797ad04b7d8221988e71b8f03f603ff82ceffe85f743c97de5290f033359bac70526cc642d6e232846e02c9445fe
SHA1 hash: 9bfba151f9acc1dc6a4afb56cde013e621a45caf
MD5 hash: 4d8c6dfc65e5f44770b9f5a12e1534c4
humanhash: delaware-cup-oklahoma-mountain
File name:faktur 002012001864 07062020.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:399'907 bytes
First seen:2020-07-06 08:50:30 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 12288:G2aCp7Ea6mx2aP/UBmQPlyvtY9rIjwiLMMDcKWKjwGSEhg:BaCJIaca6g7QowGJ+
TLSH A084230956E90F0B0E3E34C214E660EF46A9F1E4011E7FE92658CDE9BE71587F7EA844
Reporter abuse_ch
Tags:7z AgentTesla geo IDN


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: fosetico.com
Sending IP: 109.228.8.101
From: Aburizal Salim <aburizalsalim9@gmail.com>
Subject: Mengirim faktur Anda 002012001864 tanggal 07/06/2020
Attachment: faktur 002012001864 07062020.7z (contains "faktur 002012001864 07062020.exe")

AgentTesla SMTP exfil server:
mail.protege.com.mx:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cbbfabef867d1fe5dee8501f3dffdb4e72cc51d379cd9ab12dd412fd59035e86/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-06 08:52:05 UTC
AV detection:
13 of 29 (44.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zo72x34gpup6lxxikapt3763jzzmyuotphgzvmjn2qjp2widl2da._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z cbbfabef867d1fe5dee8501f3dffdb4e72cc51d379cd9ab12dd412fd59035e86

(this sample)

AgentTesla

Executable exe 1a7536823e4ab496ae01d1f878ed16da358aa6313ac0da85562b1039ccd4e4a2

  
Dropping
MD5 aed789fe2bb84346503a82ee3cbd7e74
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1a7536823e4ab496ae01d1f878ed16da358aa6313ac0da85562b1039ccd4e4a2

Comments