MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c43f21098859f3350f0860a15d9b006c920033a1d04efdc0ae8d8cb1d25d2328. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c43f21098859f3350f0860a15d9b006c920033a1d04efdc0ae8d8cb1d25d2328
SHA3-384 hash: 573049cf3fb16c7fc465c9a081906ff00cb836e464b341fe2442b63abd853b19a7fb3160c36c8b904817ce41ad17a76e
SHA1 hash: 0f1f7f9f6924df36578a3407727307fec346a8f3
MD5 hash: 9e3662f25b314023e897e75ca470f9bb
humanhash: shade-juliet-oklahoma-nevada
File name:ACCOUNT DETAILS.ISO
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'245'184 bytes
First seen:2021-02-22 13:57:01 UTC
Last seen:2021-02-23 06:18:26 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:nuFxhSGe3x+udHMMS5KM3wkJGpPQokn22JpF:qiGe3jMjo2wUGpYo8J
TLSH 184523625662D1EBE3385E3097B56B35EFB548220033664F331D2E8CBF325C602AD796
Reporter lowmal3
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
3
# of downloads :
123
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c43f21098859f3350f0860a15d9b006c920033a1d04efdc0ae8d8cb1d25d2328/
Threat name:
Win32.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2021-02-22 13:57:06 UTC
AV detection:
7 of 47 (14.89%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yq7sccmilhztkdyimcqv3gyansjaam5b2bhp3qforwgldus5emua._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/c43f21098859f3350f0860a15d9b006c920033a1d04efdc0ae8d8cb1d25d2328

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso c43f21098859f3350f0860a15d9b006c920033a1d04efdc0ae8d8cb1d25d2328

(this sample)

AgentTesla

Executable exe 6fc2efa2cf3861fffccd45eb3102c8946f443e88544094a4524df69d91cf41c8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6fc2efa2cf3861fffccd45eb3102c8946f443e88544094a4524df69d91cf41c8
  
Dropping
MD5 86c915fa9427f3b4144edf5504a4a9e2

Comments