MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 86a0eca7a0e5bf2a040fce266615bdb15f11785b140e0e4a583f2221f6604066. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 86a0eca7a0e5bf2a040fce266615bdb15f11785b140e0e4a583f2221f6604066
SHA3-384 hash: 96eeb8b7761f80fccf586102931baf7eb6d67a5d7451dce458d67305ae83b8d7f015ef2d3ef66dfd2cb5cc88f292797b
SHA1 hash: 78fefd842a616eebb064710ac397b8b28bb5b590
MD5 hash: 99753cd79a4831364a7b0141a6b30166
humanhash: rugby-nineteen-diet-steak
File name:purchase order....19.10.2020.img
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'835'008 bytes
First seen:2020-10-19 06:43:14 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:GAHnh+eWsN3skA4RV1Hom2KXMmHaFEwZHjknueX6gvLz5:hh+ZkldoPK8YaFEzqgx
TLSH 8B85BE0273D1C036FFABA2739B6AF60156BC79254123852F23981DB9BD701B1267E763
Reporter abuse_ch
Tags:AgentTesla img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: ns.krasgtn.ru
Sending IP: 192.145.14.2
From: Scott Richardson<sales@autoequip.co.nz >
Reply-To: sales@autoequip.co.nz
Subject: Purchase order...19.10.2020
Attachment: purchase order....19.10.2020.img (contains "iyvry.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.AutoIT-3.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.JS.EmbeddedEXE-5.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.AIT.Trojan.Nymeria.1583.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/86a0eca7a0e5bf2a040fce266615bdb15f11785b140e0e4a583f2221f6604066/
Threat name:
Script-AutoIt.Trojan.AitInject
Create hunting rule
Status:
Malicious
First seen:
2020-10-18 22:35:35 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=q2qozj5a4w7subapzytgmfn5wfprc6c3cqha4ssyh4rcd5taibta._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Eldorado
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/86a0eca7a0e5bf2a040fce266615bdb15f11785b140e0e4a583f2221f6604066

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img 86a0eca7a0e5bf2a040fce266615bdb15f11785b140e0e4a583f2221f6604066

(this sample)

AgentTesla

Executable exe ea7bab4bc272e541ed341a0e4836a83bb569c874e2a2ae0bf9bb0f171a4075cf

  
Dropping
MD5 455b3b93458c0f726da78358b0adff1f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ea7bab4bc272e541ed341a0e4836a83bb569c874e2a2ae0bf9bb0f171a4075cf

Comments