MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 25af4fb058b5caa15651cc3c35c85b53b7ef0a38077644684a04e2dc9d6a5c91. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 25af4fb058b5caa15651cc3c35c85b53b7ef0a38077644684a04e2dc9d6a5c91
SHA3-384 hash: 01795350b2aa73ebbd7ad57b3f6536760a8128dcddfe648b4cba3b0a42de9305499b41fd234253b6539780ff2fc09571
SHA1 hash: 60fd83b5cd3d32781f1421c7d91e5fee65b3100c
MD5 hash: 517fea3f1d8ba98a712f31f2a134d637
humanhash: whiskey-alanine-earth-florida
File name:MV TAN BINH 135.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'043'646 bytes
First seen:2021-09-06 05:13:57 UTC
Last seen:Never
File type:unknown
MIME type:application/x-7z-compressed
ssdeep 24576:1iP/LtjZ2Kkc4wSCXQ5U0jcG7RtEaFZlUgi093Vq+BbzRTZP:1i7264wSCz4cGNe+79l1bzz
TLSH T1452533C0F225F367B984942FCAB20B9183D575793BA276F1FF9809362ADF051B764A40
Reporter fabjer
Tags:AgentTesla z

Intelligence

File Origin
# of uploads :
1
# of downloads :
170
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.7z_pdf.UNOFFICIAL
Create hunting rule

Win.Malware.Lisk-9884866-0
Create hunting rule

Win.Malware.Lisk-9886225-0
Create hunting rule

Win.Malware.Lisk-9886839-0
Create hunting rule

Win.Malware.Lisk-9886840-0
Create hunting rule

Win.Malware.Lisk-9890448-0
Create hunting rule

Win.Dropper.Lisk-9890449-0
Create hunting rule

SecuriteInfo.com.Gen.Variant.Johnnie.221809.751.14920.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/25af4fb058b5caa15651cc3c35c85b53b7ef0a38077644684a04e2dc9d6a5c91/
Threat name:
Win32.Trojan.Bingoml
Create hunting rule
Status:
Malicious
First seen:
2021-09-06 03:37:36 UTC
AV detection:
14 of 43 (32.56%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ewxu7mcywxfkcvsrzq6dlsc3ko366crya53ei2ckatrnzhlklsiq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/25af4fb058b5caa15651cc3c35c85b53b7ef0a38077644684a04e2dc9d6a5c91

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

unknown 25af4fb058b5caa15651cc3c35c85b53b7ef0a38077644684a04e2dc9d6a5c91

(this sample)

AgentTesla

Executable exe a97278750b1c8339b6fc7601434b733174ec05d6bd5dbde44a2a98ca6951f183

  
Dropping
SHA256 a97278750b1c8339b6fc7601434b733174ec05d6bd5dbde44a2a98ca6951f183
  
Delivery method
Distributed via e-mail attachment

Comments