MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8b5b6d1d413dd05753e4678f0309778bf12046a8309238dd446837eea83d3f33. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8b5b6d1d413dd05753e4678f0309778bf12046a8309238dd446837eea83d3f33
SHA3-384 hash: 91ea12cf0a1be539a0576d9011cbf5046acaaa352f47d5639cea785f8a2113812e013056b4999c0ec8b851e2cb8c06ff
SHA1 hash: ddd2854448edd2e48658ad1eaf04dc5219ef6698
MD5 hash: e0b68003378ea836ce67b409acee4b91
humanhash: hawaii-oven-leopard-juliet
File name:Ticari Hesap Özetiniz.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:429'033 bytes
First seen:2020-07-06 11:32:55 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:Nkl22hxgnzBppv5ZwRvvHALgo1yZyLdY5k/Ci9F:Nj6U97R+R3jmm58F
TLSH 679423E271D8B6EE74E787440BA44D63DA487215A0CCC93C0D16F6736BD3A5129C8EBA
Reporter abuse_ch
Tags:AgentTesla Akbank geo rar TUR


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: vps13126.ervers.com
Sending IP: 185.209.60.160
From: Akbank Ticari Bankacılık <ticaribankacilik@bilgi.akbank.com>
Subject: HAZİRAN 2020 Ticari Hesap Özetiniz (Ref:2053878463)
Attachment: Ticari Hesap Özetiniz.rar (contains "Ticari Hesap Özetiniz.exe")

AgentTesla SMTP exfil server:
mail.jjfconsultores.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8b5b6d1d413dd05753e4678f0309778bf12046a8309238dd446837eea83d3f33/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-07-06 11:34:05 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rnnw2hkbhxifou7em6hqgclxrpysarvigcjdrxkena365kb5h4zq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 8b5b6d1d413dd05753e4678f0309778bf12046a8309238dd446837eea83d3f33

(this sample)

AgentTesla

Executable exe ebe66ba4d86cd90af8bfae8cafbd71d56f183b72ac6ceb332ec9fbddd3c18452

  
Dropping
MD5 8bce3dcf9501534dd0b594cb08980dc1
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ebe66ba4d86cd90af8bfae8cafbd71d56f183b72ac6ceb332ec9fbddd3c18452

Comments