MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 62a7055052de9fb73060834a6d2032b0bf884ca2964a174429c64dc6a1b4a2e5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 4 Yara Comments

SHA256 hash: 62a7055052de9fb73060834a6d2032b0bf884ca2964a174429c64dc6a1b4a2e5
SHA3-384 hash: a57fd0f3744871aa0d792ccd5d859a1c40d8e078d7bc0a01787a9645a3c409be8dcd938b08e3adbe2cf8d0420234bcb9
SHA1 hash: 2992e096cc4d3f38d305eb1a1ec8de81d385ccb8
MD5 hash: 0e0108c77308a2e441db27d19f99f523
humanhash: don-green-green-early
File name:payment invoice.img
Download: download sample
Signature AgentTesla
File size:471'040 bytes
First seen:2020-06-30 12:42:25 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:eYMBMb0oyOw5eONkNgKJAtnBj5rOqaiXOz:sK0o8HNYpgj5rOP
TLSH 03A4F1983300769FD85B87B9D9D59DB4A77029A7032BC357688B1DDBAA0E756CF000B3
Reporter @abuse_ch
Tags:AgentTesla img

Malspam distributing AgentTesla:

Sending IP:
From: Shabeer M. T <>
Subject: Re: Payment Assistance Due To Covid-19 Pandemic
Attachment: payment invoice.img (contains "payment invoice.exe")


Mail intelligence
Trap location Impact
Global Medium
# of uploads 1
# of downloads 22
Origin country FR FR
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Injector
First seen:2020-06-30 12:44:05 UTC
AV detection:11 of 31 (35.48%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 17.24%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



img 62a7055052de9fb73060834a6d2032b0bf884ca2964a174429c64dc6a1b4a2e5

(this sample)

Delivery method
Distributed via e-mail attachment