MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cfaa07a65524716f01de1841b46c84afa1be4b2679251cfd153cc652a4d2e0ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cfaa07a65524716f01de1841b46c84afa1be4b2679251cfd153cc652a4d2e0ff
SHA3-384 hash: 1d2683409b9f6946a91715cd79116cfda237caca99b3dbc5ba97e81d3ddfec65b6e25ef1a405bd08b3c0e2b91444305f
SHA1 hash: 6b5a7b8b4ba8ca82d175c6df8c0d6617ff4a3fcf
MD5 hash: 36cdd81355642b1aa284f31bee867886
humanhash: papa-lake-south-steak
File name:000028990022201_S.05.12.2020.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:400'053 bytes
First seen:2020-05-12 16:16:18 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 12288:SHO3SJeHHnDF4HW+gnZ1MokDHpnZ6tmi/CKw:B3lHmHNiZeNtnZ6wi9w
TLSH 22842355A173AC4FE94C6F38B2400DB0FEB833296F99541E14A4F87D1719FAA4E4099F
Reporter abuse_ch
Tags:7z AgentTesla


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: Berlusconi Michele <berlusconimichele@gmail.com>
Subject: Pagamento in ritardo
Attachment: 000028990022201_S.05.12.2020.7z (contains "000028990022201_S.05.12.2020.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Autorun
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 08:06:39 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
14 of 31 (45.16%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=z6vapjsveryw6ao6dba3i3eev6q34szgpesrz7ivhtdffjgs4d7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z cfaa07a65524716f01de1841b46c84afa1be4b2679251cfd153cc652a4d2e0ff

(this sample)

AgentTesla

Executable exe 17c3a3aabe85b35b68b3376bf9470d45770dab07460b139ba25c1c31c76297fb

  
Dropping
MD5 911395d838df7e2a013290724591638e
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 17c3a3aabe85b35b68b3376bf9470d45770dab07460b139ba25c1c31c76297fb

Comments