MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a33769ba063ee4dab3e2a5fe445e8f67d079bde7f81b850ebabe082dab7b9742. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a33769ba063ee4dab3e2a5fe445e8f67d079bde7f81b850ebabe082dab7b9742
SHA3-384 hash: ee8149e755d59916d230d13baf8cf2f0046f59e8caff0466e897ee61c4226f6a50c529741df1dbf0cc1cd3e498386e28
SHA1 hash: 7c2495fca1cf3588763d12eb50d1083c9dd49988
MD5 hash: d3ae3be5caedfd9eb17e5d85b02e2e86
humanhash: failed-wisconsin-nine-ceiling
File name:Outstanding Invoice Schedule Payment.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:495'061 bytes
First seen:2020-04-30 10:06:09 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:uo0ubldLMRcSYWEEF+DmW8CB0NGY/SE5ZfG3AUX:ulub7MgWEJlfB0NGWWX
TLSH 76B4232DEF80D7ED2A410BB9980591BC4E89EEF95098C2F4F56FF26607B1358F6144E1
Reporter abuse_ch
Tags:AgentTesla zip


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: serve0.trandingslo.pw
Sending IP: 174.138.57.55
From: admin@ipindenko.co.id
Subject: Outstanding Invoice & Schedule Payment
Attachment: Outstanding Invoice Schedule Payment.zip (contains "Outstanding Invoice & Schedule Payment.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-04-30 10:36:42 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
27 of 47 (57.45%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=um3wtoqgh3snvm7cux7eixupm7ihtpph7anykdv2xyec3k33s5ba._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip a33769ba063ee4dab3e2a5fe445e8f67d079bde7f81b850ebabe082dab7b9742

(this sample)

AgentTesla

Executable exe 38a765f04db07e561bdf8944b580cfb4dd6759496d4479cf230af9e943d3c27c

  
Dropping
MD5 2927a78dd455dda41964c9afa63beed4
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 38a765f04db07e561bdf8944b580cfb4dd6759496d4479cf230af9e943d3c27c

Comments