MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0a353ef346b1c2ecbfd2cda35040b6b5e9853dd60e1cb06f1286eed10463829d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0a353ef346b1c2ecbfd2cda35040b6b5e9853dd60e1cb06f1286eed10463829d
SHA3-384 hash: 71b7b34a8299bc68ae125e7a38946dca527fe9f09ceb4dd41896cdfbcb7274822e5e68d4e0ed6b826b174d77fab1b53e
SHA1 hash: fb5e639c90562cdc70418a414baf2039f9d5f9fa
MD5 hash: 2f7bea0577115f7682c9895d2a5f4426
humanhash: comet-bacon-florida-stairway
File name:Order 1097C.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:462'384 bytes
First seen:2020-05-08 09:07:00 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:oJq5eHsNesvFj4zgRmtqOMidGIcbArxA6huyZmmz/VorGItK96mTlQ4szZd1jhDJ:0q5eZsyhF9NHRmmDVobmTK/zZd1pVj
TLSH 8EA42373DEF9BCC1F5A0D47B615E88105E7289EB313687051A1B8AE62EF12F83485F06
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: slot0.biokorntackt.com
Sending IP: 45.95.168.106
From: Lina Karagianni <info@biokorntackt.com>
Subject: AW: oferta
Attachment: Order 1097C.rar (contains "Order 1097 SOC 0057-20 - LK- 195-18 A05XXT00INFOCC.exe")

AgentTesla SMTP exfil server:
mail.privateemail.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-09 04:09:56 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=bi2t542gwhbozp6szwrvaqfwwxuykpowbyola3ysq3xncbddqkoq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 0a353ef346b1c2ecbfd2cda35040b6b5e9853dd60e1cb06f1286eed10463829d

(this sample)

AgentTesla

Executable exe cee75468b5e72c5859de410468220a3d897b5eea8cd633fac8db04ad90d48e3f

  
Dropping
MD5 187d6f52c1fb597a5b23b0abca7727e1
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cee75468b5e72c5859de410468220a3d897b5eea8cd633fac8db04ad90d48e3f

Comments