MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c2bb1c5662dba62cfa049c563620acfc1ca23083cf0e9162cfcc8a035c4a46be. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c2bb1c5662dba62cfa049c563620acfc1ca23083cf0e9162cfcc8a035c4a46be
SHA3-384 hash: f26906ba2bd538722596df1a761bd36b0beb2bb57f9e707d5a891734fcc197e6cd90fca8a29ad046f32802ff55d2eb12
SHA1 hash: 3195704b7467ef384c15e6fbbc1d499e5dd0a08a
MD5 hash: b2d673269d07c06c3e3527b7015216cb
humanhash: ack-king-enemy-indigo
File name:Order-Request.tar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:687'616 bytes
First seen:2020-07-08 12:09:14 UTC
Last seen:Never
File type: tar
MIME type:application/x-tar
ssdeep 12288:9k7Yi4Xj/tQBWi/y67k86oxVOwBDpmF66IurI+2YG1g:Y14/oDnsUgkEMuk
TLSH E2E4AE23F2E14433F16216399C5BD77C5836FE113E695A472BE49D4CAE38381386A2B7
Reporter cocaman
Tags:tar


Avatar
cocaman
Malicious email
From: =?UTF-8?Q?Mart=C3=ADnez_P=C3=A9rez?= <martinepz@gestoclic.com>
Received: from server.swmmailcenter.online (server.swmmailcenter.online [5.56.62.128])
Date: Wed, 08 Jul 2020 03:58:18 -0700
Subject: Productbeschikbaarheid en contactaanvraag
Attachment: Order-Request.tar

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

SecuriteInfo.com.Win32.Herz.B.6016.5488.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c2bb1c5662dba62cfa049c563620acfc1ca23083cf0e9162cfcc8a035c4a46be/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-08 12:11:04 UTC
File Type:
Binary (Archive)
Extracted files:
47
AV detection:
34 of 47 (72.34%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

tar c2bb1c5662dba62cfa049c563620acfc1ca23083cf0e9162cfcc8a035c4a46be

(this sample)

AgentTesla

Executable exe 757bfb5a8c34123d653c92fbf978f61c40088cef27a2438142f004d90fb0eedd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 757bfb5a8c34123d653c92fbf978f61c40088cef27a2438142f004d90fb0eedd

Comments