MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a8717d6a5cb70ed3abca64e8528687ff23580f2cac4c35b4e4983fa7d417e7f3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a8717d6a5cb70ed3abca64e8528687ff23580f2cac4c35b4e4983fa7d417e7f3
SHA3-384 hash: 8575204162cb237279e3c936705b4bc6e36af7842c8dd9d32c53ebaa5d436028bb27a8560379b3da9342779820577ffa
SHA1 hash: ff1891a0e9449bf0416903f77ad8468fd650014d
MD5 hash: 3d910741e5f3d49860d64cdea7e11c58
humanhash: wisconsin-failed-echo-diet
File name:BID7000222453-07-21-20.IMG
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'310'720 bytes
First seen:2020-07-21 18:34:38 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:hvasJIUjakN4LqfVDW0tWoA7DIicK2m0jv12MrSVIDQ4P:bJIBf6DWzoA7DCmmtYIDQ4P
TLSH 3055AE00FBF485C6D3AA1F7AD47141009671F95BABE6E78B3B84F2AD58523588743F12
Reporter abuse_ch
Tags:AgentTesla GoDaddy img


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: p3plsmtps2ded01.prod.phx3.secureserver.net
Sending IP: 208.109.80.58
From: BARBARA ILONA NUNEZ GUZMAN <BNune0004@contratistas.codelco.cl>
Subject: Licitación: 7000222453
Attachment: BID7000222453-07-21-20.IMG (contains "BID7000222453-07-21-20.exe")

AgentTesla SMTP exfil server:
mail.mehatinfo.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.GenKryptik.EOQO.16155.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a8717d6a5cb70ed3abca64e8528687ff23580f2cac4c35b4e4983fa7d417e7f3/
Threat name:
ByteCode-MSIL.Trojan.MassLogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-21 18:35:51 UTC
AV detection:
12 of 29 (41.38%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=vbyx22s4w4hnhk6kmtuffbuh74rvqdzmvrgdlnheta72pvax47zq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

img a8717d6a5cb70ed3abca64e8528687ff23580f2cac4c35b4e4983fa7d417e7f3

(this sample)

AgentTesla

Executable exe 767d213b2083d5ba0cfb4e4d281fcce7d2233345ec7932e2d89cf303fd51b10e

  
Dropping
MD5 7cab4fe81fa7a3bb91bbdb1b94254478
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 767d213b2083d5ba0cfb4e4d281fcce7d2233345ec7932e2d89cf303fd51b10e

Comments