MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f85122b64fa03ba9e8088363db7e1408280a82057c505fcbb8a610815d4d3b0f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f85122b64fa03ba9e8088363db7e1408280a82057c505fcbb8a610815d4d3b0f
SHA3-384 hash: a66e22a0820466da12f626dafca551747cba20a577b891abef6d884c6ade7c825406bffae48cb8416b64cce1d3a73816
SHA1 hash: 516c1a1e0068d9c3dd3b0022a5f592a402230b58
MD5 hash: 5b133870d86e2e832749e6cf3f8fa5ec
humanhash: equal-river-butter-papa
File name:Attached_invoices.pdf.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:348'523 bytes
First seen:2020-05-15 11:02:20 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:L0adFVeRJsatxYP8cP3AGUDegKH7pXX7pIvW0bIqEAF2bHmzRQyaMvJWLXu1izP:fXVe3jxM8cPEHs7xXSFbZS/MBWLXukr
TLSH 347423C9439B8B13A5D8689E579CD0D8F3E7168AADFFB54C58E7726309002A1B4317F8
Reporter abuse_ch
Tags:7z AgentTesla


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: francisco ad <info@renauto2000.it>
Subject: Richiesta di pagamento
Attachment: Attached_invoices.pdf.7z (contains "Attached_invoice(s).pdf.exe")

AgentTesla FTP exfil server:
ftp.pan-door.gr:21

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-15 11:36:13 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
16 of 48 (33.33%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7bisfnspua52t2aiqnr5w7qubauavaqfprif7s5yuyiicxknhmhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z f85122b64fa03ba9e8088363db7e1408280a82057c505fcbb8a610815d4d3b0f

(this sample)

AgentTesla

Executable exe 5c0435e674c08de5bfb78dbfdf4e01716a91780c4197bec1b3c3309361352058

  
Dropping
MD5 12d602cd01871493db51493061b872b0
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5c0435e674c08de5bfb78dbfdf4e01716a91780c4197bec1b3c3309361352058

Comments