MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 770f845e7f998ef3c947811ea2277ddaf4b5db56138172972a2efe185c868d3e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 770f845e7f998ef3c947811ea2277ddaf4b5db56138172972a2efe185c868d3e
SHA3-384 hash: d9e932b31ddecd41e9ddc75f38b0001e70e61b23beb0ca04a3e7edc0c1845aae65003e50985b6f2cbd3581a09c45ed02
SHA1 hash: ad1640813206fe2aee4c04df296f6f811c3032ca
MD5 hash: 3a374394083f6a5aefc296f3a79aeb9c
humanhash: echo-diet-robin-minnesota
File name:TALIMAT-arabic - BIOTECON - PAYMENT.GZ
Download: download sample
Signature AgentTesla
Create hunting rule
File size:306'786 bytes
First seen:2020-06-17 04:59:25 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:KBYqj88+3BXKuRcCu+26EASPJmYKTVXZEhoWbUWGbdlNiLf0e5Y7GgAuPqeDHBNT:A6DwuRcx+NEAswX4oWbJGJUf084HT
TLSH F06423F171145E1106CE74B6D8E04FC734C8E01F7A9D29F25B6A8E7D867708AAC2B9E1
Reporter cocaman
Tags:AgentTesla gz


Avatar
cocaman
Malicious email
From: Hajer Saleh <hsaleh@albarakaturk.com.tr>
Received: from albarakaturk.com.tr (unknown [185.222.58.155])
Date: 17 Jun 2020 01:19:17 +0200
Subject: Payment order
Attachment: TALIMAT-arabic - BIOTECON - PAYMENT.GZ

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-17 05:01:06 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=o4hyixt7tghphskhqepkej353l2llw2wcoaxffzkf37bqxegru7a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 770f845e7f998ef3c947811ea2277ddaf4b5db56138172972a2efe185c868d3e

(this sample)

AgentTesla

Executable exe 977eb3104726250bc364dcb5732a75c743c502bd816aef9c813ba73cb1ce3cbd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 977eb3104726250bc364dcb5732a75c743c502bd816aef9c813ba73cb1ce3cbd
  
Dropping
AgentTesla

Comments