MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf296f6492a60042d1d28e1415aee903351a98c982c78b7f9e54c2ef19979579. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cf296f6492a60042d1d28e1415aee903351a98c982c78b7f9e54c2ef19979579
SHA3-384 hash: 9bb49e340991392f8df48d175e1211575d5a1b297abf1f56acc06f3a5208437e07f755771a29e4c38909c1af56c0925c
SHA1 hash: 14e1b1d114e3c6fbd17c2d1f16b573832158b1f8
MD5 hash: 2bd863cef67ac028459b613605f23b46
humanhash: nine-six-south-maryland
File name:PAYMENT RECEIPT COPY.pdf.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:744'135 bytes
First seen:2020-07-20 17:39:40 UTC
Last seen:2020-07-22 06:15:16 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:R4MzJzE9yhfnJQeEsDPhP6JG2qhpHQXhxcbzZTzxi4PxAuY1nJ4J06i8KJVFYrFc:RhJRfWeEsR6TcHajcbtfxigAJVqJu8KX
TLSH FDF4332139335638223E075376DE54625BA526A8951E38F6703C89C9797F332E23F739
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cf296f6492a60042d1d28e1415aee903351a98c982c78b7f9e54c2ef19979579/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-20 06:42:54 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=z4uw6zesuyaefuosrykbllxjam2rvggjqldyw746ktbo6gmxsv4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/cf296f6492a60042d1d28e1415aee903351a98c982c78b7f9e54c2ef19979579

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar cf296f6492a60042d1d28e1415aee903351a98c982c78b7f9e54c2ef19979579

(this sample)

AgentTesla

Executable exe b572e9835906b475227eb4cedf06c39545299588174675b18e63f3b03c999652

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b572e9835906b475227eb4cedf06c39545299588174675b18e63f3b03c999652
  
Dropping
MD5 9fce31a6135ce84fa859905319fbfaa2

Comments