MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e34f0b1c95c090fca2174cbb49c1b12d79e576c6034de45ed667e04c8c72fce3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e34f0b1c95c090fca2174cbb49c1b12d79e576c6034de45ed667e04c8c72fce3
SHA3-384 hash: 23238ac1b2631932903cfaa841c41bafbc0393a8d5fb3b678c88ea6926c6400ab41b43d60cc9ae86308c369664cbece7
SHA1 hash: d5e75cc2d7c2b4fdec51d11b4a9508d0d89b9a20
MD5 hash: a495a8ff3b9505bc0673b7b8f5bea8d6
humanhash: mango-green-table-yankee
File name:ALL PRODUCTS - AL MULLA SHEET UPDATE LIST.xle.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:497'664 bytes
First seen:2020-05-20 04:21:09 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:wr6RlDyxerwuLwGY28MNrY9dH0gZqcx5TuU:wr6XyIcHGvhCPHdqcx
TLSH 04B401912ABD6BB2D23ECBF42520601247F77046A671EB1C7ECDB4E70327B424A51E93
Reporter cocaman
Tags:AgentTesla iso


Avatar
cocaman
Malicious email
From: Nabeel Mahmood <nabeeldxb@almullagroup.com>
Received: from almullagroup.com (unknown [209.58.149.76])
Date: 19 May 2020 18:52:41 -0700
Subject: COMPANY PROFILE - HVAC PRODUCT SUPPLIER
Attachment: ALL PRODUCTS - AL MULLA SHEET UPDATE LIST.xle.iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PWS.Siggen2.49052.8428.2572.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Geniso
Create hunting rule
Status:
Malicious
First seen:
2020-05-20 09:56:06 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
16 of 30 (53.33%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=4nhqwhevycipziqxjs5utqnrfv46k5wgang6ixwwm7qezdds7trq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso e34f0b1c95c090fca2174cbb49c1b12d79e576c6034de45ed667e04c8c72fce3

(this sample)

AgentTesla

Executable exe 2364247c3aeffef1ab3a097e386e61917c7083f53e016888d5c450e9f1c656ac

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2364247c3aeffef1ab3a097e386e61917c7083f53e016888d5c450e9f1c656ac
  
Dropping
AgentTesla

Comments