MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 96807d61819a6a0881a9d509ed33df288f49d3bef1b1d08910a17d7bfd20bdb6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 96807d61819a6a0881a9d509ed33df288f49d3bef1b1d08910a17d7bfd20bdb6
SHA3-384 hash: bdaaff3494d608d1051af7cd33387fc893d044b4567f05f727418c396ab0fcb14a02c2c2ce4e2cf4d6a5ab75dffd8d43
SHA1 hash: 2a7a7ab91b37b1625e31afea410320a579a45fee
MD5 hash: 4deb97212c9230839ddb584f14b32e55
humanhash: kitten-texas-potato-idaho
File name:Transferência de cartão 2020.08.05.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:406'329 bytes
First seen:2020-08-05 11:36:28 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 12288:p6oWfi/4bnsaA1dijMTrb437L5rmxTulEDRH:phKsRbi6rb+7LFm4lENH
TLSH 788423487DAB8F50BB44906B029AFB1C05655C2C92A692E3F6BB460B3C6DCC7F1425DF
Reporter abuse_ch
Tags:7z AgentTesla geo PRT


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: mail.lse.org.ro
Sending IP: 89.38.250.177
From: Carmen Armand <carmenarmand33@gmail.com>
Subject: Transfer de plată 2020.08.05
Attachment: Transferência de cartão 2020.08.05.7z (contains "Transferência de cartão 2020.08.05.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/96807d61819a6a0881a9d509ed33df288f49d3bef1b1d08910a17d7bfd20bdb6/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-05 08:58:57 UTC
AV detection:
8 of 47 (17.02%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=s2ah2ymbtjvaranj2ue62m67fchutu566gy5bciquf6xx7jaxw3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/96807d61819a6a0881a9d509ed33df288f49d3bef1b1d08910a17d7bfd20bdb6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 96807d61819a6a0881a9d509ed33df288f49d3bef1b1d08910a17d7bfd20bdb6

(this sample)

AgentTesla

Executable exe eb1b7de281314b2e0f451624c9deded0e4c1968850a20ab5ebf621d62e4a2a35

  
Dropping
MD5 08f0c321d2e31fdabbff9b070298173d
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 eb1b7de281314b2e0f451624c9deded0e4c1968850a20ab5ebf621d62e4a2a35

Comments