MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7ccef8ecc0c41d8321724b0a2811d4af0bca13a58e3bf1c629d061083312cfcd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7ccef8ecc0c41d8321724b0a2811d4af0bca13a58e3bf1c629d061083312cfcd
SHA3-384 hash: 22698f187fe933e22395dc9a9459003c80d11e0df628cffbdbb686787633745aa098751c09c9ea7b7df420a81f532cdb
SHA1 hash: 5296af35e5c513e51652db8e3d2cc14482ab660e
MD5 hash: 5a2b7f2a4db48f95e262266fc12f9cac
humanhash: eighteen-friend-william-princess
File name:Al Jaber Dubai.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:666'031 bytes
First seen:2020-12-03 06:42:50 UTC
Last seen:2020-12-03 23:49:39 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:hRVJEP19JClwutF9kFn/XjdMVxfEAJZJBS3JD0AKldQ/dte4ESLb:VJQJFu/Y/JMEAJZJsJDZKI/dtjLb
TLSH 66E4232462AD4EC7461FBB136C358652BB8BE0A74142846B338E7126EE3E7075675CCF
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
3
# of downloads :
105
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.MSIL.Agent.ERG.21730.32615.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7ccef8ecc0c41d8321724b0a2811d4af0bca13a58e3bf1c629d061083312cfcd/
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2020-12-03 06:43:06 UTC
File Type:
Binary (Archive)
Extracted files:
26
AV detection:
15 of 26 (57.69%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=pthpr3gayqoygilsjmfcqeouv4f4ue5fry57drrj2bqqqmysz7gq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.75
Link:
https://yomi.yoroi.company/submissions/7ccef8ecc0c41d8321724b0a2811d4af0bca13a58e3bf1c629d061083312cfcd

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 7ccef8ecc0c41d8321724b0a2811d4af0bca13a58e3bf1c629d061083312cfcd

(this sample)

AgentTesla

Executable exe 33bf5c7e008702144c8ec88d5e22c80609463864658612f818d43ca963a5d156

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 33bf5c7e008702144c8ec88d5e22c80609463864658612f818d43ca963a5d156
  
Dropping
MD5 b82e8e3462f15ef46218fe27db93fd8b

Comments