MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 87015b88d5978d993fb93794eb2b454ac36d5d1ab83b4a1b18aefa481ef48423. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 87015b88d5978d993fb93794eb2b454ac36d5d1ab83b4a1b18aefa481ef48423
SHA3-384 hash: 272efb91c446d1a37ac5a7eaa775ed3b7fcada5970ec255f9f1c6a2bdbb571b76d06b7d61fbaf028f1d13e31dd47ca9a
SHA1 hash: 024acf01317f257ef20413338f84f707927bd0d0
MD5 hash: d0dffb53eaf2d21407970538b020e066
humanhash: alaska-vegan-eight-floor
File name:PO 876543456.Z.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:936'461 bytes
First seen:2020-06-09 05:07:09 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:L7y4sc76cWT5dkkDeH9b+TqQTBp9jomPgl:S4YnkkDeH9CTnBp5xIl
TLSH CC1533F291E054F31734C26ABB8F37F171DA62EEEB091D5EC6E2825A841A3562F0513D
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27681.XorExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.23627.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Predator
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 05:09:03 UTC
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=q4avxcgvs6gzsp5zg6kowk2fjlbw2xi2xa5uugyyv35eqhxuqqrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 87015b88d5978d993fb93794eb2b454ac36d5d1ab83b4a1b18aefa481ef48423

(this sample)

AgentTesla

Executable exe 06fa29bfe88ec7adf47798e9ec98077ae0388e63a1b70f9ec19ca265f93e2e71

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 06fa29bfe88ec7adf47798e9ec98077ae0388e63a1b70f9ec19ca265f93e2e71
  
Dropping
MD5 dc0bfd70e2cdc0487601947f404f970a

Comments