MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cc5dc98baf0f7eb2744613a2208bbcbfa8d02ce39bec690ecaf4976d7f5ec4b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cc5dc98baf0f7eb2744613a2208bbcbfa8d02ce39bec690ecaf4976d7f5ec4b6
SHA3-384 hash: 8b9a4dd7dce30a8aada44aec02d7e2df33d5379d4b8e75c6b2952544a90532c6e036d26659ed498cc9a6ee471645379d
SHA1 hash: 25509f4f2031f291d0a12ec2517660181665da7a
MD5 hash: 666518279922b066a936fc74c6d0f5c0
humanhash: salami-comet-oregon-nebraska
File name:Order spec Details .rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:274'166 bytes
First seen:2020-07-16 06:17:51 UTC
Last seen:2020-07-17 04:07:27 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:K6j7r/ZPWQhEa/nEo3LbAKenmVhPT7BfAFBSqrfUHmnSzN8:Ku7r5E3c3AYZdAHLYmX
TLSH 22442377A6D70E035E2C68516132507A4EE6BF370754E4DF2B485D63C623E14FA816B3
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: mcegress-30-lw-18.correio.biz
Sending IP: 191.252.30.18
From: Eziquiel Augustin <contato@megacriacoes.com.br>
Subject: Fwd: Re: Augustin Order Inquiry
Attachment: Order spec Details .rar (contains "Order spec & Details .exe")

AgentTesla SMTP exfil server:
smtp.skybarnds.net:587

Intelligence

File Origin
# of uploads :
2
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cc5dc98baf0f7eb2744613a2208bbcbfa8d02ce39bec690ecaf4976d7f5ec4b6/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-16 04:52:42 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zro4tc5pb57le5cgcorcbc54x6unalhdtpwgsdwk6slw2726ys3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar cc5dc98baf0f7eb2744613a2208bbcbfa8d02ce39bec690ecaf4976d7f5ec4b6

(this sample)

AgentTesla

Executable exe 6093b0ef8a611c4be1ce3aed1ff0611027ecade6b61e74e5ba8708b061d20c40

  
Dropping
MD5 046ef316f1f22b78b5162396bb8dca8c
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6093b0ef8a611c4be1ce3aed1ff0611027ecade6b61e74e5ba8708b061d20c40

Comments