MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 595b1c786ceef31f85e9abf84f8a1f217ede19cc00d6c80a961b16d3e8e5bb17. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 595b1c786ceef31f85e9abf84f8a1f217ede19cc00d6c80a961b16d3e8e5bb17
SHA3-384 hash: d28871c7f854192950a6cbc5da207434edaf54f234f124211886f9d5f9149027dc6fdc7a89eefcd1f380dec0bc5f285a
SHA1 hash: f7908c1863a4f0b8af38506808220e1d6822980f
MD5 hash: a3f23b714231ca1105c47113b17dc796
humanhash: arizona-shade-idaho-utah
File name:URGENT (QUOTE) FOR POWTEK REQUIREMENT.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:404'558 bytes
First seen:2020-06-09 06:06:06 UTC
Last seen:2020-06-10 05:40:56 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:j3T6WuLxwjobYI7Sm/Aj69f/lFwuzsiwT+ARZ0e3rxQTJJ5ClTG5d7:bt+x0obYI7fAG9fNqPxT+AXtaTglC37
TLSH EC84236799C6E03A93DDD1CA087FE5E3692CFF33999FC83503500DB845A5ABC2469788
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.43301562.17873.22993.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-08 16:23:44 UTC
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lfnry6dm53zr7bpjvp4e7cq7ef7n4gomadlmqcuwdmlnh2hfxmlq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 595b1c786ceef31f85e9abf84f8a1f217ede19cc00d6c80a961b16d3e8e5bb17

(this sample)

AgentTesla

Executable exe 664bab89e8bf8d8634eae118b560eddc60abf8866d8dba681ed3b50aadfce8c1

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 664bab89e8bf8d8634eae118b560eddc60abf8866d8dba681ed3b50aadfce8c1
  
Dropping
MD5 bc61c30aca441ffb05cb6a7f4e20e398

Comments