MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 722c51c91978e73571c3d6dd833c1e44a5f848a3efec110610be7034ff92964e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 722c51c91978e73571c3d6dd833c1e44a5f848a3efec110610be7034ff92964e
SHA3-384 hash: 7e78dc469f9d5db06d85449ee98d070ebb5eca59007dc15db5505fe3c2f00f6c5dd9ea36614d5634d522cd43e9c73426
SHA1 hash: 87b004c6593d8ae1b77b1939e46e58e449946703
MD5 hash: 6c6e45dcf28a70eaff8ac7c1d29f8047
humanhash: lake-helium-ohio-hotel
File name:0004344411_CATALOG.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:381'951 bytes
First seen:2020-06-12 07:43:17 UTC
Last seen:2020-06-12 12:50:58 UTC
File type: gz
MIME type:application/x-rar
ssdeep 6144:qQuhxhpV7s3vmgE+NwuIGSqN57I+N9Oxt2xipjMgqrskwYuZ3UQoXZhnj+Ayzjg6:nuhxHV4xNtIGSM5k+N9BkpAfrsBYDRXg
TLSH 2A84233ECDDE9A21A6F73233811347B49D85B5C7F24708B6D4D63F7E10D888D6AA8858
Reporter cocaman
Tags:AgentTesla gz


Avatar
cocaman
Malicious email
From: Cyrus.Lee@alco-valves.com
Received: from alco-valves.com (unknown [185.222.58.152])
Date: 12 Jun 2020 07:33:05 +0200
Subject: 00043441 - Request DBB ( 200272_PP ) Urgent
Attachment: 0004344411_CATALOG.gz

Intelligence

File Origin
# of uploads :
4
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-12 07:45:07 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=oiwfdsizpdttk4od23oygpa6iss7qsfd57wbcbqqxzydj74sszha._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 722c51c91978e73571c3d6dd833c1e44a5f848a3efec110610be7034ff92964e

(this sample)

AgentTesla

Executable exe 7a28361e4dd1d4c59ec750984fa7f815bb4aaf46b502fc52be8dc3ec1726bee7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7a28361e4dd1d4c59ec750984fa7f815bb4aaf46b502fc52be8dc3ec1726bee7
  
Dropping
AgentTesla

Comments