MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 423939e139459de143cff6c82fc823b21ecdfce42672cf319eba4e087f8c6743. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 423939e139459de143cff6c82fc823b21ecdfce42672cf319eba4e087f8c6743
SHA3-384 hash: 4d5027fd207fc33ae4e3f4fbb1850dff0d3725b133f65ed2a735c6a0817d3d526efe4195c1e0abde03523ce552e49679
SHA1 hash: 8ea5a3280795411017b7358f3b4b117f932da4a2
MD5 hash: 97ac31bb07410b38599fe12ce2620107
humanhash: oklahoma-shade-idaho-quebec
File name:MRCSB Office Proposal201 #218B 20200505 ,pdf.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:564'114 bytes
First seen:2020-05-05 05:45:18 UTC
Last seen:2020-05-05 07:07:14 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:wVhOpSFBMcu7hsgeN/FPcYfDOVWPSztRKCpkd+id5DplpgVs4:iOpiMcmht8dfD83J4CyPPDplpgZ
TLSH E2C42364D80F9E02B2853B0C11C1EEBB8307439867BF5852D895EB8F781787D8EFA580
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: "MARJIE ZOLLKEFLY" <marjie@aimstelecom.com>
Received: from aimstelecom.com (unknown [103.133.111.162])
Date: 4 May 2020 17:29:26 -0700
Subject: RFQ #218B INDUSTRIAL MRCSB
Attachment: MRCSB Office Proposal201 #218B 20200505 ,pdf.rar

Intelligence

File Origin
# of uploads :
3
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-05-05 06:35:32 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
17 of 31 (54.84%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ii4ttyjziwo6cq6p63ec7sbdwipm37heezzm6mm6xjhaq74mm5bq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 423939e139459de143cff6c82fc823b21ecdfce42672cf319eba4e087f8c6743

(this sample)

AgentTesla

Executable exe 4421f642dd9caf0803c0be41afd29115599f419b34c1b5c8c054324212803752

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4421f642dd9caf0803c0be41afd29115599f419b34c1b5c8c054324212803752
  
Dropping
AgentTesla

Comments