MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c1531fe90666f0a561c2b447487267d3a64fa74cce53c2ea4258db0b40a211a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: c1531fe90666f0a561c2b447487267d3a64fa74cce53c2ea4258db0b40a211a9
SHA3-384 hash: a39167a6bf0a483e2bd5862f9e6850c018194b7d1f6970a2fa980f563e094a9ee4e4aba487c370d604ebbb64c4080b87
SHA1 hash: 93e61cffb8f3581541c1b85646185ae16f7d539f
MD5 hash: 34ae54d3180179bff0bc987a77b9ee05
humanhash: fruit-thirteen-quiet-mockingbird
File name:fattura.arj
Download: download sample
Signature AgentTesla
File size:604'143 bytes
First seen:2020-10-14 15:20:22 UTC
Last seen:Never
File type: arj
MIME type:application/x-rar
ssdeep 12288:cZ9TD2sQPfqu0Ug9IrDa5DKIW+F5RWi9Qe2KvGQE24Vehhd9:cZ9TD2sQPtKIrb8yin2KejFVed9
TLSH 4CD4234E4EBB04D7F8644283841517BAEF0037E953AB5FE4988CD4357CE9B6CAB4351A
Reporter abuse_ch
Tags:AgentTesla arj


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: trecommerciale@biacchiettore.it
Subject: Pagamento del saldo
Attachment: fattura.arj (contains "fattura.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

arj c1531fe90666f0a561c2b447487267d3a64fa74cce53c2ea4258db0b40a211a9

(this sample)

  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments