MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5e60245754303149a37219624e2dfc64fa4dc2028fbd98fce1bb0957d03c60d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5e60245754303149a37219624e2dfc64fa4dc2028fbd98fce1bb0957d03c60d9
SHA3-384 hash: 30b7e2fd384e089a62e1d02b9df14007bd31cee45283bc8cd1962172aeeb4a1d1cbe2b7434e5ce3497686649bef7e39e
SHA1 hash: d4dd20eae3de7ec0ceb7ba40a991f4e29758b727
MD5 hash: af722a4304fa4666d1519e0dd6e9905c
humanhash: fruit-fruit-carolina-fruit
File name:Ticari Hesap Özetiniz.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:514'141 bytes
First seen:2020-08-31 08:30:43 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288://KcyJU17BXdCloLMHW3BQP6Y2QtlC4hUTkO7Wj4Ng:nLSloLgcijUTkODg
TLSH 23B423B627C2516E9AEFD7CEF4D67DF32EA1282A1374437617852EB3C85788119C9023
Reporter abuse_ch
Tags:AgentTesla geo rar TUR


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: Akbank Ticari Bankacılık<ticaribankacilik@bilgi.akbank.com>
Subject: AĞUSTOS 2020 Ticari Hesap Özetiniz (Ref:2121353866)
Attachment: Ticari Hesap Özetiniz.rar (contains "Ticari Hesap Özetiniz.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5e60245754303149a37219624e2dfc64fa4dc2028fbd98fce1bb0957d03c60d9/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lzqciv2ugayuti3sdfre4lp4mt5e3qqcr66zr7hbxmevpub4mdmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5e60245754303149a37219624e2dfc64fa4dc2028fbd98fce1bb0957d03c60d9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 5e60245754303149a37219624e2dfc64fa4dc2028fbd98fce1bb0957d03c60d9

(this sample)

AgentTesla

Executable exe 43b9043095de14d30537478501d00056ff457e325588282279826e42bb01810d

  
Dropping
MD5 c9d8a2ac249ab76e1e808e7956ff7354
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 43b9043095de14d30537478501d00056ff457e325588282279826e42bb01810d

Comments