MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 242661f73c8d6cc40a44a95c4d76b7576e9b1c40e0c906bada41012c27f853ce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 242661f73c8d6cc40a44a95c4d76b7576e9b1c40e0c906bada41012c27f853ce
SHA3-384 hash: 02872b63bd6775fa2f93a26d1bfecea1024c0086f61f136eadd252dfe2421aebdebf8a9311046f71eb8fbf9707cd1ae5
SHA1 hash: b8ea9cfb8eed617802b99fcf170696e4f9b5866a
MD5 hash: 00f6fb6419545f09ff653b0c3489ea86
humanhash: mississippi-hydrogen-eighteen-white
File name:Packing List_0007_08.04.2020.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:896'470 bytes
First seen:2020-06-15 05:30:33 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:JHmkrWLorsx5yYodG/qziwAMCqzLROiFWa5G82:JGkrWLTSY4G/qGHSnROkG82
TLSH E01533385A34092DD35902ABC68F66B95EB77891D77ECA3399EAC0CB521C8C1336F146
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: winpro1.internet-webhosting.com
Sending IP: 113.23.184.89
From: <segamat@megamart.com.my>
Subject: FW: Preshipment Documents
Attachment: Packing List_0007_08.04.2020.rar (contains "Packing List_0007_08.04.2020.exe")

AgentTesla SMTP exfil server:
mail.confidencegroup.co:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.AitInject
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 05:32:06 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=eqtgd5z4rvwmicsevfoe25vxk5xjwhca4deqnow2ieasyj7ykpha._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 242661f73c8d6cc40a44a95c4d76b7576e9b1c40e0c906bada41012c27f853ce

(this sample)

AgentTesla

Executable exe 23fdb980882367630cc6aa6cb2bb6f49291b171bbaae699935b21b41e388a3d3

  
Dropping
MD5 8dbcbe3a529250f2eed6ca0ab3410ddb
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 23fdb980882367630cc6aa6cb2bb6f49291b171bbaae699935b21b41e388a3d3

Comments