MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f1b2bf23fccb771cf09fce847b2bd5096d60399d2ea68f5a397e97c409bfeb0b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f1b2bf23fccb771cf09fce847b2bd5096d60399d2ea68f5a397e97c409bfeb0b
SHA3-384 hash: 3e56079e593b0a13000228865f043ebdea100c82b45841dbe590525008dbcdb28cf667846953894d72c1c51ee90208d3
SHA1 hash: bf650fc21564a766210d66cc08669c97b0f6466a
MD5 hash: 25d08a6b877e77ce375c23ade2c5ea18
humanhash: march-oven-white-fanta
File name:faktura 002012001864 ze dne 16.07.2020.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:375'659 bytes
First seen:2020-07-16 06:18:09 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:zI8dERfovzeZ56cdVapXBT0veTslen8vH86LY3MD+aCFcaSPHyY:EhyeZ56UZmow8vpsNaCOrfX
TLSH 688423BBEF72BD164F163351E1E784400CA1B7FCCDECF47921255B9968D1B68082D226
Reporter abuse_ch
Tags:7z AgentTesla CZE geo


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: fosetico.com
Sending IP: 109.228.8.101
From: Daniel Okamura <danielokamura3@hotmail.com>
Subject: Odeslání faktury 002012001864 ze dne 16/07/2020
Attachment: faktura 002012001864 ze dne 16.07.2020.7z (contains "faktura 002012001864 ze dne 16.07.2020.exe")

AgentTesla SMTP exfil server:
mail.mlibano.com.br:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f1b2bf23fccb771cf09fce847b2bd5096d60399d2ea68f5a397e97c409bfeb0b/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-16 06:20:07 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=6gzl6i74zn3rz4e7z2chwk6vbfwwaom5f2ti6wrzp2l4icn75mfq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z f1b2bf23fccb771cf09fce847b2bd5096d60399d2ea68f5a397e97c409bfeb0b

(this sample)

AgentTesla

Executable exe 270592773be872b958648c433f1fe0b5e2b50260800608cc644b3a8172090343

  
Dropping
MD5 e0f5e7c68f37ad291bd18bce7b4f1627
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 270592773be872b958648c433f1fe0b5e2b50260800608cc644b3a8172090343

Comments