MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4704a20091e3e272c77514a29dee6f5995317fec867eebc0159dd41cb0e747e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a4704a20091e3e272c77514a29dee6f5995317fec867eebc0159dd41cb0e747e
SHA3-384 hash: a962299a72dca3bfdefd72a51195299a93d548e1a44687333b565c56c717e9363b391097c387cdad7277769031ea9a0f
SHA1 hash: 1c481ddfa045edf3e29a3bfacc3dc4f3888c2a20
MD5 hash: bbd665dcbb514e956a02521cffe627c1
humanhash: pizza-one-thirteen-asparagus
File name:SWIFT_XV5.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:346'112 bytes
First seen:2021-03-05 06:39:29 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 6144:e8LxBjo+ys5gnF2k4gMLTBjPVZ5UlIlU0OttvpFi/w3p:1JY2X/nhPVnUQOtZbiUp
TLSH F574126236C398AFE1D282B4457ABB2DF373720412319287B7ADADAF2B031165F15752
Reporter fabjer
Tags:AgentTesla iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
121
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20210304-2306.UNOFFICIAL
Create hunting rule

PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a4704a20091e3e272c77514a29dee6f5995317fec867eebc0159dd41cb0e747e/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uryeuiajdy7coldxkffctxxg6wmvgf76zbt65pablhoudsyoor7a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/a4704a20091e3e272c77514a29dee6f5995317fec867eebc0159dd41cb0e747e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso a4704a20091e3e272c77514a29dee6f5995317fec867eebc0159dd41cb0e747e

(this sample)

AgentTesla

Executable exe 9785024470a4d46ec73337a43698c74387853bbe500c7d893eed47730da1ecd5

  
Dropping
SHA256 9785024470a4d46ec73337a43698c74387853bbe500c7d893eed47730da1ecd5
  
Delivery method
Distributed via e-mail attachment

Comments