MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a1b5d7f3950e65bcce963dca156e5276be925333a9001e8270c666e6c4348dff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a1b5d7f3950e65bcce963dca156e5276be925333a9001e8270c666e6c4348dff
SHA3-384 hash: 54eb7537dcc9654aff2f26acc2310e9d3ca12544c49effa374e5ada1e78487d1dbb962bc5f0122fcb17ca93b06987a5e
SHA1 hash: de467b1ee312f26bbc8f4c34542aebcbb5b9b63a
MD5 hash: 3137ae7149bb8b81063fcc7bdafbfa85
humanhash: king-virginia-lima-purple
File name:Ref 10M-86776.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:513'550 bytes
First seen:2020-10-27 09:59:53 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:9gwAaQZ3tFCzT37zZW4Q/gz/OGslSv5JP1sL+lVdKO:2uQZ9MXHTOGs05JPqLuqO
TLSH 3DB423C7599EF45D3C357DC4FE06A63A30C22648FAA5120C9EE1786D6AB762F4045E83
Reporter abuse_ch
Tags:AgentTesla zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: sumaco.ae
Sending IP: 103.99.1.146
From: Mohammad Rashedul Alam<rashed@sumaco.ae>
Subject: Request to URGENT REQUIREMENT! ( Ref : 10M-86776)
Attachment: Ref 10M-86776.zip (contains "Ref 10M-86776.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a1b5d7f3950e65bcce963dca156e5276be925333a9001e8270c666e6c4348dff/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-27 07:48:32 UTC
AV detection:
20 of 28 (71.43%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ug25p44vbzs3ztuwhxfbk3sso27jeuztveab5atqyztonrburx7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip a1b5d7f3950e65bcce963dca156e5276be925333a9001e8270c666e6c4348dff

(this sample)

AgentTesla

Executable exe f587268a159ff1575424cb5897096b60eaf11a2f94a40b48e844c05f03ebc004

  
Dropping
MD5 e376319ba415ae4e06ce5c5687bf8a15
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f587268a159ff1575424cb5897096b60eaf11a2f94a40b48e844c05f03ebc004

Comments