MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fc6bbb904bac0661cfab9ed871759f4afd349093e6271a691cabe1a31f6c5a1a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fc6bbb904bac0661cfab9ed871759f4afd349093e6271a691cabe1a31f6c5a1a
SHA3-384 hash: 80dee417218561860b8ab8f4e1203f5c56c5dde3803a31d09759ff5fefacb362501cd2025b1c4070c317e0facf89dbc5
SHA1 hash: 466bc18c058855ac835c39a6d9ccece94a0b809b
MD5 hash: 89336f8bb573f3137618b2bb96695b71
humanhash: eighteen-whiskey-leopard-single
File name:swift T T confirmation.xz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:497'799 bytes
First seen:2020-07-09 04:21:11 UTC
Last seen:Never
File type: xz
MIME type:application/x-rar
ssdeep 12288:M0qVsBov5o2YtO1G0QLqEAJbm2zWmxeAN8vhkyP:CKov5o2YM1+LZAJKhqyP
TLSH 0DB423934425D63CA16C6150312A5EE75C53697833E38CA274CFF19F87FEC0AE6B2592
Reporter cocaman
Tags:AgentTesla xz


Avatar
cocaman
Malicious email
From: =?UTF-8?Q?Ashif_C=2EK_=E2=80=93_Accounts_department?=
<info@npfqqtar.com>
Received: from 142-4-22-49.unifiedlayer.com (142-4-22-49.unifiedlayer.com [142.4.22.49])
Date: Wed, 08 Jul 2020 17:39:30 -0600
Subject: SWIFT T T COMFIRMATION
Attachment: swift T T confirmation.xz

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20200709-1146.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fc6bbb904bac0661cfab9ed871759f4afd349093e6271a691cabe1a31f6c5a1a/
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-09 01:21:00 UTC
File Type:
Binary (Archive)
Extracted files:
110
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7rv3xeclvqdgdt5lt3mhc5m7jl6tjeet4ytru2i4vpq2gh3mlina._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

xz fc6bbb904bac0661cfab9ed871759f4afd349093e6271a691cabe1a31f6c5a1a

(this sample)

AgentTesla

Executable exe 2f82dffb6984064e3a865298818c2081de389fced1e4d98b12f2da014a74fcb9

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2f82dffb6984064e3a865298818c2081de389fced1e4d98b12f2da014a74fcb9
  
Dropping
AgentTesla

Comments