MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 abbd36fb5f072b6712e855c44da6bff594927b8714e4fa39bf8839613d549f5e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 4 Yara Comments

SHA256 hash: abbd36fb5f072b6712e855c44da6bff594927b8714e4fa39bf8839613d549f5e
SHA1 hash: a3645379eeb56adb55db2f7efb9d412ca97718b4
MD5 hash: f7174c4956d90610504c3b2d15dd5ba2
File name:LOI BARMINCO EGYPT 25,000 MT.gz
Download: download sample
Signature AgentTesla
File size:409'354 bytes
First seen:2020-05-22 10:10:33 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:/GEPS84cZ7lEkTmXckc9mu7VCuCL3CcK++e4HN:VPSq7OkTmXVUmu7ouoct
TLSH FD94232043412DD066FD710D5BDCBF7D9AC8AEDAE80B4635EE22CDD5C879D48A39A306
Reporter @abuse_ch
Tags:AgentTesla gz


Twitter
@abuse_ch
Malspam distributing AgentTesla:

HELO: vxadt-32.srv.cat
Sending IP: 134.0.8.66
From: Abeer Qunswa <info@q-nap.com>
Reply-To: Fernado <farnandol_79@hotmail.com>
Subject: BARMINCO LOI FOR EDIBLES FOODS
Attachment: LOI BARMINCO EGYPT 25,000 MT.gz (contains "LOI BARMINCO EGYPT 25,000 MT.exe")

AgentTesla SMTP exfil server:
smtp.yandex.com:587

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 1
# of downloads 22
Origin country US US
ClamAV No detection
VirusTotal:Virustotal results 17.74%
ReversingLabs :No data

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz abbd36fb5f072b6712e855c44da6bff594927b8714e4fa39bf8839613d549f5e

(this sample)

  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments