MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 40f3c2e87b7c001b8fa3e18856d007cff87e3d86904117981dabb86665e73fb5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 40f3c2e87b7c001b8fa3e18856d007cff87e3d86904117981dabb86665e73fb5
SHA3-384 hash: 522d063ecfcbac084340db05bc74d970f5218964b6c4e89961d126261f496154c5be25ca89a1ee60c27792e65a07dadb
SHA1 hash: eccc2f1751b2a03df457ed07a66a3117ba3054f4
MD5 hash: b2fa48a0bf0548d15399a3227ec3718c
humanhash: maryland-asparagus-india-hydrogen
File name:Images for New materials.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:217'088 bytes
First seen:2020-11-06 09:53:47 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 1536:a6j1i1MFtaa8ahx2t1dRtKn3meRLd142qF7bsa7xqzP0GZ9vsyW5FuS3sERe+hlz:a9lwrSkJ8EAmjc+8
TLSH B724A6F4A56F8890F41B857029ADBA6000B37D8F96D55E0833ACF9323BF73523945A4E
Reporter abuse_ch
Tags:AgentTesla img


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: Apinya Intarabudh <Apinya@ecandes.de>
Subject: Pricing for materials (New order)
Attachment: Images for New materials.img (contains "Images for New materials H12Etxknwemhib9.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.FileRepMalware.19710.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/40f3c2e87b7c001b8fa3e18856d007cff87e3d86904117981dabb86665e73fb5/
Gathering data
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=idz4f2d3pqabxd5d4gefnuahz74h4pmgsbarpga5vo4gmzphh62q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 40f3c2e87b7c001b8fa3e18856d007cff87e3d86904117981dabb86665e73fb5

(this sample)

AgentTesla

Executable exe c2915b4dd61e16f6da8aeb380a2732bdba70764af261819afa71e83481333004

  
Dropping
MD5 5e237ab5a301c8df8770d5187ad32ff9
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c2915b4dd61e16f6da8aeb380a2732bdba70764af261819afa71e83481333004

Comments