MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a9d90569957b5a1836a6743fa600cf04638c9f45c9eba559d5b6430f2a3afcf4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a9d90569957b5a1836a6743fa600cf04638c9f45c9eba559d5b6430f2a3afcf4
SHA3-384 hash: c4e76ef0f27d8c7ac96e772b6d4a65cc847b3572d1f2c936eda8278ed35945667f0ceded9838c59545117391d2a4df6b
SHA1 hash: 9526e210492a34632eadb708c20ed0341df9d87c
MD5 hash: 89a320adb5d7d92ddded1e1ccbc65eae
humanhash: pizza-queen-venus-earth
File name:PO.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:424'941 bytes
First seen:2020-04-30 09:36:52 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:z4lo/0zVm4Q/2L98y4yzlspjxhAc5znq8jAuQIKXFl2i:k3u/gd4pcoHK72i
TLSH 689423431958BA16D0B9E2F4677EBF3F83487C1AF3AA3254E2CD5E1C27A055631A32D1
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: Purchas Manager<Cathy Zhao@asianpaints.com>
Received: from asianpaints.com (unknown [23.146.240.34])
Date: 30 Apr 2020 05:14:19 -0400
Subject: =?UTF-8?B?UkU6UE8gIGZvciDCoEFwciAyOCwgMjAyMA==?=
Attachment: PO.pdf.z

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-04-30 08:15:28 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
27 of 48 (56.25%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=vhmqk2mvpnnbqnvgoq72magparryzh2fzhv2kwovwzbq6kr27t2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z a9d90569957b5a1836a6743fa600cf04638c9f45c9eba559d5b6430f2a3afcf4

(this sample)

AgentTesla

Executable exe b181d961be210bb562ac633b2482bdb459b20dede6e48cd837903a021df59da7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b181d961be210bb562ac633b2482bdb459b20dede6e48cd837903a021df59da7
  
Dropping
AgentTesla

Comments