MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7
SHA3-384 hash: ce70d8b43084c4e10b825c266094a628ed2e420a25db7993dfba6568b4d5bb04e3d859e85f9201e73610c17b0d4107e9
SHA1 hash: 38d52a66763bca7c7f3fb7cf9e17c91f27825109
MD5 hash: fe6ab566f9e007c7ca1908ffcb935889
humanhash: monkey-high-october-robin
File name:RFQ#F44E0741.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:295'653 bytes
First seen:2020-09-15 05:29:03 UTC
Last seen:2020-09-15 07:05:17 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:2AmcnRioTphnZ0O+FNpVsEtAbry7DxcjFoPfqhm4j42T2Dv+Pqkq+GGEx:2oRzLZ0OktAXy76ZoPb402TaW7wG4
TLSH 595423E58B35901A13234A4F5FB1E972D3749BEAB29356288C0E17EFD61C4917B8E10D
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: "Fluid Controls Purchase" <purchase@fluidcontrols.com>
Received: from 172.93.184.181 (unknown [172.93.184.181])
Date: 15 Sep 2020 04:30:15 +0200
Subject: RE: New RFQ#F44E0741
Attachment: RFQ#F44E0741.rar

Intelligence

File Origin
# of uploads :
3
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3jrlzoxzphlhsqzzkcknrtkuulycaqna5xjyelhihrdpjssswl3q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar da62bcbaf979d67943395094d8cd54a2f02041a0edd3822ce83c46f4ca52b2f7

(this sample)

AgentTesla

Executable exe dba9ab278a6ff48c2119f65e8824b32e1df9d6a9e586828ca3641d34abe3e938

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dba9ab278a6ff48c2119f65e8824b32e1df9d6a9e586828ca3641d34abe3e938

Comments