MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4a325533be1205824bc963aa2fa13155cb779cd5073ad7049f9c36dc2fa13efa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4a325533be1205824bc963aa2fa13155cb779cd5073ad7049f9c36dc2fa13efa
SHA3-384 hash: 7e871e20e9e7f7e8e6f60dbbc949ee5458e465a854016c8ff970b046ab7fdf67b8165e2ecdd023abc42fac84a472af67
SHA1 hash: a27c2a226fa78d23ea3961c7613d8b3dbae9b409
MD5 hash: ffce489ae721fcf39f76812d0768284a
humanhash: double-october-bulldog-oklahoma
File name:Ticari Hesap Özetiniz.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:399'594 bytes
First seen:2020-07-03 06:49:54 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:JCy7lyAebFEFW+EtcOuwlD8cKMVA0ZRT5D7:Jng/COmXcKMVA0ZRT5D7
TLSH 5C842334FE117060F713ADD415895AA2E1ADD73F69D180CACA3498DD2DC08BB1DADCBA
Reporter abuse_ch
Tags:AgentTesla Akbank geo rar TUR


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: mail.anadoludigital.com
Sending IP: 188.124.27.59
From: Akbank Ticari Bankacılık <ticaribankacilik@bilgi.akbank.com>
Subject: HAZİRAN 2020 Ticari Hesap Özetiniz (Ref:2053878463)
Attachment: Ticari Hesap Özetiniz.rar (contains "Ticari Hesap Özetiniz.exe")

AgentTesla SMTP exfil server:
mail.brimaq.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4a325533be1205824bc963aa2fa13155cb779cd5073ad7049f9c36dc2fa13efa/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 06:51:07 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jizfkm56cicyes6jmovc7ijrkxfxphgva45nobe7tq3nyl5bh35a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 4a325533be1205824bc963aa2fa13155cb779cd5073ad7049f9c36dc2fa13efa

(this sample)

AgentTesla

Executable exe 8856f35869791682a13d8b1b62e384674e93495194f22f0c501d0770348e85bc

  
Dropping
MD5 c00908722b0ca2c76dd9a8eeeeec4c8b
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8856f35869791682a13d8b1b62e384674e93495194f22f0c501d0770348e85bc

Comments