MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 54dfd41402b28ce156b99cf2675e10b78ccebe3bdbae67073ebb24fb71b08299. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 54dfd41402b28ce156b99cf2675e10b78ccebe3bdbae67073ebb24fb71b08299
SHA3-384 hash: 66637469917018bc9fd6901bc76802b99cd7095d54b82b1fa00f28018dba73eefe24a4bc7ba7ac7f389b679e1aadb8a1
SHA1 hash: 40a354902351ec72834c8b6ae6e363fce5ed84e5
MD5 hash: a84fe3882a6d15652dde4916eacd657b
humanhash: music-carbon-spring-magnesium
File name:PEDIDOS C19015-7267 Y C19020-7266.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:292'864 bytes
First seen:2020-10-21 10:09:28 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 6144:MPpRJuWbmGvWo67CbXwqvexuRHIXqr//hY2jKR:+bmGv9baxuRHIUhYyK
TLSH EA544A01CE5BDD67FC887BF6F8255BEE9B3548181D23F71622EE09849F1E2C404572A6
Reporter abuse_ch
Tags:AgentTesla img


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: limon.medyabim.com
Sending IP: 93.89.20.47
From: Santiago Perez <santiago.perez@salico.net>
Subject: RV: PEDIDOS C19015-7267 Y C19020-7268
Attachment: PEDIDOS C19015-7267 Y C19020-7266.img (contains "PEDIDOS C19015-7267 Y C19020-7266.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/54dfd41402b28ce156b99cf2675e10b78ccebe3bdbae67073ebb24fb71b08299/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ktp5ifacwkgocvvzttzgoxqqw6gm5pr33oxgobz6xmspw4nqqkmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 54dfd41402b28ce156b99cf2675e10b78ccebe3bdbae67073ebb24fb71b08299

(this sample)

AgentTesla

Executable exe 8a953841629e0122e04d2b8cd56422a90919139f5d00df5f00b804752ce519cd

  
Dropping
MD5 a38d00d48e48bb7d20d4d18725706dc8
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8a953841629e0122e04d2b8cd56422a90919139f5d00df5f00b804752ce519cd

Comments