MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 30a87a46d22e098fe05ade8a3d0b9855c7b5f74d1249ed0486fbc3ba50af3fc7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 30a87a46d22e098fe05ade8a3d0b9855c7b5f74d1249ed0486fbc3ba50af3fc7
SHA3-384 hash: 1437061c31fdc54bd5b070007f9e03cd706d13888937ebf516b68910378be97aa03fbc7deae5e3fdfd661311246bd9c3
SHA1 hash: 6737c1c1ae89593fb068eeadedf631369f2b7642
MD5 hash: 1e00d493c3c2010f0742f14a3eafbf1a
humanhash: thirteen-beryllium-lion-alaska
File name:urgente RFQ 12062020.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:485'376 bytes
First seen:2020-06-12 07:00:09 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:MXdXAKL/WS0ycHfED8en/BqhJM06g/j4Gs9:MNXAKR0Den/BqhJM7g8
TLSH FAA4E188369072EFC45BC83289651C24EA32B867572BD347B09F216D9B4E5A7CF112F2
Reporter abuse_ch
Tags:AgentTesla iso


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: JoaquinJulian <Joaquln.Julian@yfai.com>
Subject: QUOTATION REQUEST (YANFENG).
Attachment: urgente RFQ 12062020.iso (contains "ke6dZDC4A76N528.exe")

AgentTesla SMTP exfil server:
smtp.yandex.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BehavesLike.Win32.Generic.gc.931.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-12 07:02:07 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gcuhurwsfyey7yc232fd2c4ykxd3l52ncje62beg7pb3uufph7dq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso 30a87a46d22e098fe05ade8a3d0b9855c7b5f74d1249ed0486fbc3ba50af3fc7

(this sample)

AgentTesla

Executable exe fe996a84af7536042d8dd2fa09dd6a46120e5efa926eca53de867f74cb0130ad

  
Dropping
MD5 1d814ffc099a1500a247d27636853cd6
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fe996a84af7536042d8dd2fa09dd6a46120e5efa926eca53de867f74cb0130ad

Comments