MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3359ffeaeec8826b197410fbdd09c7376d2e73ec47e06ba33e98d33e0f33fc05. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3359ffeaeec8826b197410fbdd09c7376d2e73ec47e06ba33e98d33e0f33fc05
SHA3-384 hash: 234aaa91c16306e43869795b7075406750980aeb37d8d260852d6db4a80b726feff3dc4d0dc695f9b71d788bd2051dba
SHA1 hash: 92305eb6372fa625bb1a34a5849e8d2a433ad694
MD5 hash: 6ac8a7c4f4624a9fe525983779b94ac8
humanhash: pizza-ohio-princess-missouri
File name:Payment Slip.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'572'864 bytes
First seen:2020-10-22 07:15:47 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:1AA9dMLO1cG0yyA9xvEc7j4Ot0LA1GUKzod:+mNKGN91fKANKzo
TLSH 9F75CE98325075AFC65BCD7689A81C24E6217C67531BC207A02736EC9A3DACBDF146F3
Reporter abuse_ch
Tags:AgentTesla img Telegram


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: machinio.com
Sending IP: 45.153.240.123
From: DAVID<david@machinio.com>
Subject: Payment Slip
Attachment: Payment Slip.img (contains "Payment Slip.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3359ffeaeec8826b197410fbdd09c7376d2e73ec47e06ba33e98d33e0f33fc05/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-21 00:47:47 UTC
AV detection:
16 of 28 (57.14%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gnm772xozcbgwglucd552cohg5ws447mi7qgxiz6tdjt4dzt7qcq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 3359ffeaeec8826b197410fbdd09c7376d2e73ec47e06ba33e98d33e0f33fc05

(this sample)

AgentTesla

Executable exe 566856ddcffa1c88d52e1665e40d963fc35835ae3992b919770d79c0021c4f8d

  
Dropping
MD5 9391b0bff26a07fb1084f370e4ee1c7b
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 566856ddcffa1c88d52e1665e40d963fc35835ae3992b919770d79c0021c4f8d

Comments