MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9438a3657afee626b9f0315c5e8d3333bc0697b6aeb2c8a3744f218853230e0a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9438a3657afee626b9f0315c5e8d3333bc0697b6aeb2c8a3744f218853230e0a
SHA3-384 hash: b74fa513e3008d1f620228bf06eaeaeb10e0d4d8f6fbf5a8ceb1dc88bb12416033cf24cae1abc76b41b57c2a036d3371
SHA1 hash: 8dfcd2135401fa4e7b05a7b2a8319b9c5e08452f
MD5 hash: 159d24f466dd659b363a4da60b53d7fd
humanhash: cup-winter-vermont-undress
File name:Order inquiry.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:430'365 bytes
First seen:2020-05-12 15:52:40 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:4Qief5Ih64uU0vYKyMyzaN6FqaIMlvuCL0KfM6tf:4Q/M6vUsKtFxX1g4tf
TLSH 7A94237216878B7116707DD8A9AFB16117F9C9BE3723BBB05D8582B40C22534D6BCE34
Reporter abuse_ch
Tags:AgentTesla rar


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: "狄志明" <dizhiming@weltpack.com>
Subject: Product Inquiry -V885670 12/05/2020
Attachment: Order inquiry.rar (contains "Order inquiry.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 15:32:19 UTC
AV detection:
19 of 48 (39.58%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=sq4kgzl273tcnopqgfof5djtgo6anf5wv2zmri3uj4qyquzdbyfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 9438a3657afee626b9f0315c5e8d3333bc0697b6aeb2c8a3744f218853230e0a

(this sample)

AgentTesla

Executable exe 1eee887b16c1d789c1869219de2609fbc29ef3ee0c0625f2907c71e9ba701daf

  
Dropping
MD5 86d551025866318d41d4eeba69a3d608
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1eee887b16c1d789c1869219de2609fbc29ef3ee0c0625f2907c71e9ba701daf

Comments