MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9d86ac4982441494fdaf00cf3e6001093dab8c612f35c84734b92692223eeed0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9d86ac4982441494fdaf00cf3e6001093dab8c612f35c84734b92692223eeed0
SHA3-384 hash: a8c7adc1e455216e6a8caae91b856b459695fb10230cf83e4ae838a02baf7bea0c2f96b97daeb4097c0d5cd81dbc0dd2
SHA1 hash: 3cb65b5e006306937b318c9db54020fe6ba718ca
MD5 hash: 44aef141d20663b18da97e62faf1d945
humanhash: red-snake-video-bulldog
File name:letter of intent.pdf.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:456'139 bytes
First seen:2020-06-10 06:46:49 UTC
Last seen:2020-06-10 12:33:19 UTC
File type: gz
MIME type:application/x-rar
ssdeep 12288:l73RCVOkwbh2eIrKL/b4Ux73mmRYTmv/4GZxiXXLNf5:t3RAODCuL/FmgGmYYxiXXLr
TLSH B9A4230ED1306105AAAA07721DC929DAB757EF1D04FDB0FC217E8C2E59F5260EA16BD3
Reporter cocaman
Tags:AgentTesla gz


Avatar
cocaman
Malicious email
From: Nicola Romero <sales@assanindustry.com>
Received: from assanindustry.com (unknown [78.129.132.154])
Date: 10 Jun 2020 10:17:42 +0100
Subject: Letter of Intent
Attachment: letter of intent.pdf.gz

Intelligence

File Origin
# of uploads :
3
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20200611-0808.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-10 06:48:06 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=twdkysmciqkjj7npadht4yabbe62xddbf424qrzuxetjeir653ia._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 9d86ac4982441494fdaf00cf3e6001093dab8c612f35c84734b92692223eeed0

(this sample)

AgentTesla

Executable exe 9eb70476477594ee698676f3216e14549bccd4e350f9540eda72694901ba4129

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9eb70476477594ee698676f3216e14549bccd4e350f9540eda72694901ba4129
  
Dropping
AgentTesla

Comments