MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 99a6483deeaad096c799d56bbb31131eb305484d48a8f1f41000cb43946b9e3c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 99a6483deeaad096c799d56bbb31131eb305484d48a8f1f41000cb43946b9e3c
SHA3-384 hash: 5a1754839bcda350a498490a511f2ba0afc7c55351fc1674a0b21e2e8d53fbdced0f289659a98411a941bfe37569e3da
SHA1 hash: 64ebfe01bade877639248b368674fa3859049e1a
MD5 hash: 62d83380f65b55620d650c00fddd9c18
humanhash: fix-island-green-sierra
File name:RFQ-000013.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'274'375 bytes
First seen:2020-05-05 11:19:22 UTC
Last seen:2020-05-05 11:21:15 UTC
File type: rar
MIME type:application/x-rar
ssdeep 24576:DUVBvRa8uKhafO+3ZUfjSMM0mAxAFV/uDzqZiTXMB7i2gQti/XLY/TZH3ENLOBh:45aai3ZGM0t4O+ZiYlC8NH3ES
TLSH 164533CE3C4EC8BA0EB5B857B10BC0A1368D4FB404696984D70A77322295389D7EE56E
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: "Alberto Alvaro (DIVIPA)" <alberto@divipa.es>
Received: from simafri21.uk.plesk-server.com (simafri21.uk.plesk-server.com [87.239.21.32])
Date: Tue, 05 May 2020 11:55:39 +0100
Subject: RFQ
Attachment: RFQ-000013.rar

Intelligence

File Origin
# of uploads :
3
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Aitinject
Create hunting rule
Status:
Malicious
First seen:
2020-05-05 11:37:04 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
29 of 48 (60.42%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=tgteqppovlijnr4z2vv3wmitd2zqkscnjcupd5aqadfuhfdlty6a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 99a6483deeaad096c799d56bbb31131eb305484d48a8f1f41000cb43946b9e3c

(this sample)

AgentTesla

Executable exe 55582726659d047e9ecc980884662659a1f9befbc621e5e8b0130f0b084dfd45

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 55582726659d047e9ecc980884662659a1f9befbc621e5e8b0130f0b084dfd45
  
Dropping
AgentTesla

Comments