MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2a61bf9edf6a3c7fdfecb12938db8145b54912e2625c99eb9180ee418c067c05. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2a61bf9edf6a3c7fdfecb12938db8145b54912e2625c99eb9180ee418c067c05
SHA3-384 hash: bfe4edbfd3761bd41905e72a911c9e8d94dd4f9da99b2b2d016321254d75e22d27c9addb2c5bbf772cb20ec0d0aff391
SHA1 hash: 77cf6a9d7e2bc46b76af3165dc2e08ac0200fd8e
MD5 hash: 977406240c3de798d01008da8ed3b0e3
humanhash: nineteen-mirror-equal-fourteen
File name:Request For Quotation (10098764).pdf.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:432'247 bytes
First seen:2020-07-07 06:38:53 UTC
Last seen:2020-07-07 08:14:51 UTC
File type: gz
MIME type:application/x-rar
ssdeep 12288:kW10Nhxshcilcj+olNFdyOhhPmefQGBgDJR:kW1y0hcilc6oJ8UbfQGBgDJR
TLSH 3D94234295DE07578EA56FD26098B5D7C5F56CBBFBF3AAC385A000278D12C1132A4AFC
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
3
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2a61bf9edf6a3c7fdfecb12938db8145b54912e2625c99eb9180ee418c067c05/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-07 06:40:07 UTC
AV detection:
17 of 27 (62.96%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=fjq37hw7ni6h7x7mweutrw4biw2usexcmjojt24rqdxeddagpqcq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 2a61bf9edf6a3c7fdfecb12938db8145b54912e2625c99eb9180ee418c067c05

(this sample)

AgentTesla

Executable exe 9ac6f36e933607b09a00eb16eb67acee68fdb8ee460f556101d742dee7b7c6cc

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9ac6f36e933607b09a00eb16eb67acee68fdb8ee460f556101d742dee7b7c6cc
  
Dropping
MD5 187e0927084462031aa1220fa6ff1f85

Comments