MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cae6c700f7710dc6f776ac3b33ce3e23ea2eb82c312ccd092854691fff62f42c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cae6c700f7710dc6f776ac3b33ce3e23ea2eb82c312ccd092854691fff62f42c
SHA3-384 hash: db3366940ba6958be8a9a57021404e1f732f08cf94db9e7fd67e5c9bdb6a56ef6841c5751774636cbd2210774548d30a
SHA1 hash: 118363162e4a63046e752d21d65fcbd3cf93f58d
MD5 hash: 612b50f108ad63599d7171e203614034
humanhash: oranges-winner-michigan-freddie
File name:Catalog.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:370'760 bytes
First seen:2020-05-25 09:23:26 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:T60zOhg+o4Fb7KktM0tzeDWjLc0zHo51S1D+0Rd4v5a8byRajBSkIjpofuBIWX8l:T5ehxekYDiLc0HU1q4v5a4yRajBSSwdg
TLSH D174231413E0394BC0E549F86AA51FACB30F3C9ED443BE747BFE2A451785262E1E1D69
Reporter abuse_ch
Tags:AgentTesla z


Avatar
abuse_ch
Malspam distributing AgentTesla:

HELO: janatics.co.in
Sending IP: 156.96.157.101
From: Info<mythilikannan@janatics.co.in>
Subject: New partner enquiry
Attachment: Catalog.z (contains "Catalog .exe")

AgentTesla SMTP exfil server:
smtp.yandex.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-25 09:36:15 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
16 of 30 (53.33%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z cae6c700f7710dc6f776ac3b33ce3e23ea2eb82c312ccd092854691fff62f42c

(this sample)

AgentTesla

Executable exe 03ed2f1ff938d9186096b857aa71a835652dbb8cbb51001ce8d9b0c94542f270

  
Dropping
MD5 d2473b24ebb9e751e6dc1032c5bc3215
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 03ed2f1ff938d9186096b857aa71a835652dbb8cbb51001ce8d9b0c94542f270

Comments