MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c38470e342703d6e1be71bdd8c07970209f45f1d2f118e52870641cfc211cb2d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c38470e342703d6e1be71bdd8c07970209f45f1d2f118e52870641cfc211cb2d
SHA3-384 hash: 78caeb9e4c8cf8a919b6271591411d205629c7f0ce515f8f396136d93c1610222583d4af34e1821b0e355f5e945533a3
SHA1 hash: 775b38bdbf33a036d4393bec098763a08808742a
MD5 hash: 86720529b6f2c4ecc07439b18f409312
humanhash: quebec-ceiling-high-edward
File name:Invoice #000001.ADOBE.pdf.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:389'834 bytes
First seen:2020-06-08 04:45:04 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:lWoUS3ZZnAHxtYCh/KACSQRn6PM6ghsJMWFeFKaPi6cji5F4oOJgJPhwbf34za:lDJ3ZhYYQvZon6PbgIJQXqAIMPh2X
TLSH 878423A8E2E4EA520F84753831B53A4F6D3556BA8CD3B11C4E6A267DCF7DB900836DC4
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.24016.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.21103.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-08 04:08:34 UTC
AV detection:
23 of 31 (74.19%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yochby2coa6w4g7hdpoyyb4xaie7ixy5f4iy4uuhaza47qqrzmwq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip c38470e342703d6e1be71bdd8c07970209f45f1d2f118e52870641cfc211cb2d

(this sample)

AgentTesla

Executable exe 740ad559a3b83f05776ac9f2c650c3d6268d63848c556770c57a9e6edd9f03f5

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 740ad559a3b83f05776ac9f2c650c3d6268d63848c556770c57a9e6edd9f03f5
  
Dropping
MD5 c5a77ebd5385c09fff3c3630bb547a81

Comments