MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 30322381cbdd1eb1bf477b03d3b97d7515f0ac0631d0b1d09b12797185efb754. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 30322381cbdd1eb1bf477b03d3b97d7515f0ac0631d0b1d09b12797185efb754
SHA3-384 hash: aeb37ad371aed638f87599a965d42dfa0e24531cafec858356b972f216a4c643d4fc455b0491af25f73dee9b8eb8e0ae
SHA1 hash: fd2110075f886a9bdf9a1557908ebf8b487cb9e4
MD5 hash: faeeabfb401ebdcfc696f42d54689af3
humanhash: bluebird-twelve-south-arizona
File name:SWIFT COMMERCIAL DUTY 0818J.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:502'331 bytes
First seen:2021-02-22 07:06:47 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:mMDDBXsUlc1+hU5iEBTNFB5Hy0PnJ5KrCJghPM01k/JKo:mMJ8U+IU8Evxy0vPKUIM01kxKo
TLSH CCB42360CC37F7EB14CA955DB22838DE34FA19D7B5B12ADE18B24231867AF02D906526
Reporter fabjer
Tags:zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.36380933.13578.25448.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/30322381cbdd1eb1bf477b03d3b97d7515f0ac0631d0b1d09b12797185efb754/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-02-21 18:26:01 UTC
AV detection:
6 of 47 (12.77%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gazchaol3upldp2hpmb5hol5ouk7blagghildue3cj4xdbppw5ka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 30322381cbdd1eb1bf477b03d3b97d7515f0ac0631d0b1d09b12797185efb754

(this sample)

AgentTesla

Executable exe 3522ddfe2f7474bb41cef6015aace8681c77d2c6570d0600eab409caff68a251

  
Dropping
SHA256 3522ddfe2f7474bb41cef6015aace8681c77d2c6570d0600eab409caff68a251
  
Delivery method
Distributed via e-mail attachment

Comments