MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 13de1df0c9b533da1261aeb6b7c71d01e6e46d09d9d518fce1db1823ca6e13d2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 13de1df0c9b533da1261aeb6b7c71d01e6e46d09d9d518fce1db1823ca6e13d2
SHA3-384 hash: dd58f26a8873bbf69f73d848e6b2d66fb1a5c39230a9dad4d9bc730abb1059dd79746b39946c2c9e20dea53ebc30e3fe
SHA1 hash: 02451dc43ee9093d0d8be21d88c18da9fc365d2c
MD5 hash: f20192611dc098789feb7bf874fb295c
humanhash: quebec-april-missouri-indigo
File name:CV-JOB REQUEST______pdf.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:94'208 bytes
First seen:2021-02-22 07:20:30 UTC
Last seen:2021-02-22 10:24:24 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 768:k6NHHHYhs56NiqbVFPPJAgfTeaSYS4oYAhO:XpYhs5k/PPbTnSTY
TLSH C2933C10FAD66A13F92A7F7820D53B0C577777E1B9B6C22A3F0C629A17435814E1CB29
Reporter abuse_ch
Tags:AgentTesla iso


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mahagenco.in
Sending IP: 81.92.194.112
From: Nitheesh Thomas<nitheeshthomas@mahagenco.in>
Subject: CV-JOB REQUEST
Attachment: CV-JOB REQUEST______pdf.iso (contains "CV-JOB REQUEST______pdf.exe")

Intelligence

File Origin
# of uploads :
2
# of downloads :
96
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_badexts83.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/13de1df0c9b533da1261aeb6b7c71d01e6e46d09d9d518fce1db1823ca6e13d2/
Threat name:
ByteCode-MSIL.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2021-02-22 00:50:53 UTC
AV detection:
5 of 47 (10.64%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=cppb34gjwuz5uetbv23lpry5ahtoi3ij3hkrr7hb3mmchstocpja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso 13de1df0c9b533da1261aeb6b7c71d01e6e46d09d9d518fce1db1823ca6e13d2

(this sample)

AgentTesla

Executable exe be356a2bfc51e0fd0dbe3be84cc8760afd92743e86c723a7d97d13ea985f3bf5

  
Dropping
MD5 a321a5df5bddc8abaa3bc5fa5012bc73
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 be356a2bfc51e0fd0dbe3be84cc8760afd92743e86c723a7d97d13ea985f3bf5

Comments