MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a74506b901d0d823692e5e0c80ebdc6d780433f4389d77a5eb278d5ed903ca76. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a74506b901d0d823692e5e0c80ebdc6d780433f4389d77a5eb278d5ed903ca76
SHA3-384 hash: 1b8b25a6328417d2f5ddde2ce8c06d5639131f799cae4f47ea14d68ecf9b9f9fdfffb82b3e3b141ddeb5637eba054ce3
SHA1 hash: 7613598c2e983e124e606fc330c7f95fe5d8b0b4
MD5 hash: bae9f1319694b00500bb35dd1121007d
humanhash: lemon-south-social-lima
File name:swift copy.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:937'523 bytes
First seen:2020-06-04 16:44:30 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:bpbb4DREjVv/esB7qMgfnfRgqpzqfMtx/DyTJ:t4DR4v/eCGOW2ktJoJ
TLSH F51523DF6AD3F171D328983C6D0A07BA5CB50749B44BB53A5653E23E2A7DC80D930E26
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: Biovalley >biovalley@biovalley.fr
Received: from biovalley.fr (unknown [103.151.124.95])
Date: 04 Jun 2020 09:00:12 -0700
Subject: Re: Swift Copy
Attachment: swift copy.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 17:43:49 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=u5cqnoib2dmcg2jolygib264nv4aim7uhcoxpjple6gv5widzj3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar a74506b901d0d823692e5e0c80ebdc6d780433f4389d77a5eb278d5ed903ca76

(this sample)

AgentTesla

Executable exe 68f746d2933821737aafcf2bc00db8b8f2db8fe6b6aec4ea25eb0bf31b1c370b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 68f746d2933821737aafcf2bc00db8b8f2db8fe6b6aec4ea25eb0bf31b1c370b
  
Dropping
AgentTesla

Comments