MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf807849f22e9c09718c84f4f05a28c41f4d1b9638a4d92ee34df5188df6a24e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bf807849f22e9c09718c84f4f05a28c41f4d1b9638a4d92ee34df5188df6a24e
SHA3-384 hash: 798f08a523faf8bf56b7d578f471978a4b36ec54ca30da21af73ae148dba4f7ad41ae81bb23f81204bf2dbfc98b41646
SHA1 hash: 8625282ff076ef51acdb4271894ee211bd132504
MD5 hash: 95e67424ff814240f2dbeaa5fcb6f86d
humanhash: five-snake-purple-steak
File name:Bank Details.iso
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'245'184 bytes
First seen:2021-02-21 15:51:55 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 6144:ox/MsVodTFqY70Ijt94zcXgXytWo2SYYItxMVZ64mVaFouUX8MmG9OxJrh:ENSd5vtjoztXAzYYPo4mVaFo6M7C
TLSH 7B4502003250E413E7D976785FB6DAB29764AC4C2904269336FC3F0FB7FD2A75A0A615
Reporter fabjer
Tags:AgentTesla iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
152
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2595.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Zum.Androm.1.19555.3134.UNOFFICIAL
Create hunting rule

PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bf807849f22e9c09718c84f4f05a28c41f4d1b9638a4d92ee34df5188df6a24e/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-19 12:50:07 UTC
AV detection:
12 of 47 (25.53%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=x6ahqspsf2oas4mmqt2pawriyqpu2g4whcsnslxdjx2rrdpwujha._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso bf807849f22e9c09718c84f4f05a28c41f4d1b9638a4d92ee34df5188df6a24e

(this sample)

AgentTesla

Executable exe fd2892b638fafa197381cb5733431ce920baefa842c17e379a809cc837fcb445

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fd2892b638fafa197381cb5733431ce920baefa842c17e379a809cc837fcb445
  
Dropping
MD5 fdbd5d8a97e3037da2c542607bedb39d

Comments