MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 61995acfdf8622e014ed03e7679487eb48d56f61e3d44d768d49bcd11ddbe87b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 61995acfdf8622e014ed03e7679487eb48d56f61e3d44d768d49bcd11ddbe87b |
|---|---|
| SHA3-384 hash: | da40c1ca3c353b056a6ff4cef7c6c08c64cba70476e88405741b832467e2af22e8269dfa2c54ca7539579d0ee263d3fa |
| SHA1 hash: | 84544c92aa5b204dc2e7b842989b27431e706c11 |
| MD5 hash: | 6cc277957334411a8269efe5a99a3584 |
| humanhash: | winner-mango-november-yankee |
| File name: | HSBC PAYMENT ADVICE.7Z |
| Download: | download sample |
| File size: | 524'660 bytes |
| First seen: | 2020-10-06 06:06:15 UTC |
| Last seen: | Never |
| File type: | 7z |
| MIME type: | application/x-rar |
| ssdeep | 12288:0NNXZ4w8HiAVe/lZNP6OgjmaSnAUVn/sHhY/EmdeIQrTt3UxhDcP/7:0rJICEetvP6OXaSAUdEXmhQvmx2P/7 |
| TLSH | 0FB42391487C8A849B61531B6E5D61FF9091B1E7F8629AF019C73F278CC3252F40EB9B |
| Reporter |  abuse_ch |
| Tags: | 7z HSBC |
abuse_ch
Malspam distributing unidentified malware:HELO: gmail.com
Sending IP: 209.58.149.66
From: HSBC Advising Service <nadotubesales@gmail.com>
Subject: Payment Advice - Advice Ref:[GLV930760211]
Attachment: HSBC PAYMENT ADVICE.7Z (contains "zqeXwLtmvgPZCpN.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-10-06 03:24:29 UTC
AV detection:
3 of 48 (6.25%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
7z 61995acfdf8622e014ed03e7679487eb48d56f61e3d44d768d49bcd11ddbe87b
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.