MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9feecbd6df05253bbe492621695b02694250241443609329003da9a91ee374dd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9feecbd6df05253bbe492621695b02694250241443609329003da9a91ee374dd
SHA3-384 hash: 07b1d25ce6e58efdaed6ec3f62fbe1b6e6911d7350f89deee422c52ab7b52b6594b85bfab490d757e74f699825b948cb
SHA1 hash: abb984ba403e68aa626a2ff69162903ad080a27f
MD5 hash: 38dea0e4a62fe9d69056f75b523ab50e
humanhash: oscar-oven-robin-jersey
File name:2019 MAERSK BILL OF LADING DOCS.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:765'806 bytes
First seen:2020-11-05 07:18:56 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:bExUHQS6KMqiW8Y99d4laPWkLgP+ZZat104GdmkNqc5krC94OOqD4yDyUz7kvbDD:bCUwS6dqiWpdcyWrmZK0nmkZReOOqDFq
TLSH 1CF42301C1330B6ACBC756AD2B6D4722E619CDE48A8CA50AC9CFEDBCD710647B4FB851
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email (T1566.001)
From: "Maersk Customer Service <cindy.lu@maersk.com>"
Received: "from sadsra.xyz (rdns0.sadsra.xyz [134.209.64.69]) "
Date: "Wed, 04 Nov 2020 23:39:40 -0500"
Subject: "Longstanding Container(s) : 204103842"
Attachment: "2019 MAERSK BILL OF LADING DOCS.rar"

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9feecbd6df05253bbe492621695b02694250241443609329003da9a91ee374dd/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-11-05 07:20:09 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=t7xmxvw7austxpsjeyqwswycnfbfajauinqjgkiahwu2shxdotoq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 9feecbd6df05253bbe492621695b02694250241443609329003da9a91ee374dd

(this sample)

AgentTesla

Executable exe ca461421154f0bfaa9b24b0ed5ea776ddeffc9775e3fdb4da1339dcc352468c6

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ca461421154f0bfaa9b24b0ed5ea776ddeffc9775e3fdb4da1339dcc352468c6
  
Dropping
AgentTesla

Comments