MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 23047fd2bd4a19ff27d2a3f599d4102cf0b7228a0c4e3472425ecfb1289eaa6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 23047fd2bd4a19ff27d2a3f599d4102cf0b7228a0c4e3472425ecfb1289eaa6f
SHA3-384 hash: ef5b1259b2a35cd4b4add38b2ad6553dae3cd71271f41fc3a8ea834c52ddabe7e2c2bc29a772a4ea525a615b9a19786b
SHA1 hash: 426a91a29a755e95873efab65a52ba0f1041df39
MD5 hash: a2aa80eea31f4d402cadd60d5a82c7b8
humanhash: nine-spring-venus-bakerloo
File name:INVITATION TO BID FOR TENDER.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:855'385 bytes
First seen:2020-09-09 12:32:39 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:NsU9eM8S+SfKHFi6ejcMMJpI/kcQJt9ezwY/6EO33FZXRO258Hf9OEtZVFH3RdaH:Ns8e2BLYp8Q4zR03FnO258Hf/x6tF
TLSH B70523D7AEE1D8BC8F38784E203E776EE7568B8523E06D8C0D2721485E73671616DC86
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: UNILEVER SUPPLY CHAIN MANAGEMENT <quotation@unilever-procurements.nl>
Received: from unilever-procurements.nl (unknown [212.83.46.127])
Date: 09 Sep 2020 04:15:50 -0700
Subject: INVITATION TO BID FOR TENDER
Attachment: INVITATION TO BID FOR TENDER.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/23047fd2bd4a19ff27d2a3f599d4102cf0b7228a0c4e3472425ecfb1289eaa6f/
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2020-09-09 10:04:36 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=emch7uv5jim76j6sup2ztvaqftyloiukbrhdi4scl3h3cke6vjxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/23047fd2bd4a19ff27d2a3f599d4102cf0b7228a0c4e3472425ecfb1289eaa6f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 23047fd2bd4a19ff27d2a3f599d4102cf0b7228a0c4e3472425ecfb1289eaa6f

(this sample)

AgentTesla

Executable exe 8ae671d5515672bc6adbb32d2ab738ddb93d00553679c01ac69575f451cf97f2

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8ae671d5515672bc6adbb32d2ab738ddb93d00553679c01ac69575f451cf97f2
  
Dropping
AgentTesla

Comments