MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f02ed58d3263593222ac9bdf8dfe6ddbc2389c18a394b36477862a959f73d60. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3f02ed58d3263593222ac9bdf8dfe6ddbc2389c18a394b36477862a959f73d60
SHA3-384 hash: 66bd11ff8f1ea12e20f61481d5a0ecae9690c1f5e0d3d1c49662bd5e19efcf2f5cbeb6ffa58ac1f1ad097467981b37f5
SHA1 hash: 5ecfe55e186628b41328c9d05746dc0ec631644b
MD5 hash: 9e0eee6fbb02233f12b8bc1202bb1813
humanhash: tennessee-hydrogen-bluebird-april
File name:CLEAROCEAN MARVEL - APPOINTMENT LETTER.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:534'105 bytes
First seen:2020-05-19 04:59:36 UTC
Last seen:2020-05-19 05:14:36 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:YK3WyvxTjnQtHpHPY0jaAXm9G2GWoT8tMYCg5888jV+0DQj0:YK3WoJ6VYOaAXmXGWoOkjZEw
TLSH 56B423C64E662E69AEAA33B0A9F17BFC90B0B2C539B09764353E5D053305C8FE1C64D5
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
4
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Nanobot
Create hunting rule
Status:
Malicious
First seen:
2020-05-19 05:35:55 UTC
File Type:
Binary (Archive)
Extracted files:
28
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=h4bo2wgtey2zgirkzg67rx7g3w6chcobri4uwnshpbrkswpxhvqa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 3f02ed58d3263593222ac9bdf8dfe6ddbc2389c18a394b36477862a959f73d60

(this sample)

AgentTesla

Executable exe a1c3e150929c306086cdc461b550abe3c840da8cc0058f4f30b0cfab58dcbf0a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a1c3e150929c306086cdc461b550abe3c840da8cc0058f4f30b0cfab58dcbf0a
  
Dropping
MD5 88c8118ed8c117810b5a149ce51b824a

Comments