MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 12dee04f146d308623515bcbb602c625d44969995f55ad924bfb641abdb62ff3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 12dee04f146d308623515bcbb602c625d44969995f55ad924bfb641abdb62ff3
SHA3-384 hash: c412d0b11c3ee41310f25928daef92101920fdb2dab75338328a5b6ea841429f702b082bb18c88df785ecb9bb6da3044
SHA1 hash: 782d75869b0693ca2c45b22df2063047d9eeed54
MD5 hash: c6059789eda89b586af8bb21aa1bd99a
humanhash: paris-quebec-hamper-bluebird
File name:Quotation BID for FLORADYE-897498-sn-479873.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:750'889 bytes
First seen:2020-11-19 03:24:08 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:0YuO7NlYETrrs23O3CKCLJsjtkoDToXoJKZI7RB8CbjU8CJ:0LsN7rXi9CIznoXoJKe7n8Vr
TLSH FEF433DEF9027D8C7ABEE1EE328F57D8926D45645612CFAE387DA3B4E136100865B10C
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
108
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/12dee04f146d308623515bcbb602c625d44969995f55ad924bfb641abdb62ff3/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-11-17 23:50:38 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=clpoatyunuyimi2rlpf3mawgexkes2mzl5k23esl7nsbvpnwf7zq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 12dee04f146d308623515bcbb602c625d44969995f55ad924bfb641abdb62ff3

(this sample)

AgentTesla

Executable exe e3bffbfec3843fb0f8377ce7991e9271346e80777f312f37eec8564c38df3673

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e3bffbfec3843fb0f8377ce7991e9271346e80777f312f37eec8564c38df3673
  
Dropping
MD5 2cab67840865a7eccffe91745e883cf4

Comments