MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e0ba99f830d75b872ca6b7055abbb3ca74e8f02e6167d935e65f3e550c28b198. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e0ba99f830d75b872ca6b7055abbb3ca74e8f02e6167d935e65f3e550c28b198
SHA3-384 hash: 9a755bb32f4d95f76fd2b6ff0341b95183778a42f2b012ae61f2bc970dfdb0a62a87c22846fe4cebc5b3980f93638465
SHA1 hash: 1e5fcd70b09397e02c56a19c57d23c8fa5fe383d
MD5 hash: bbd27aed9d849e84e2c8e183d460d494
humanhash: ack-nuts-oscar-three
File name:SWIFT.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:307'889 bytes
First seen:2020-05-11 05:16:53 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:4gNhsW83WN0iy9FTyd/zGcbcDt2LzicfXUUZmVrW7kskYVbykpi:nNT80yT2KcbcDc1XZmZWJkabfw
TLSH A06423E732185A3439D03779FA9C6B356AF5B3A9451A0FFD9CB0131811E88F154AECD8
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: admin@klt-tach.com
Received: from klt-tach.com (unknown [185.99.2.49])
Date: Mon, 11 May 2020 01:13:33 +0100
Subject: Fw.SWIFT
Attachment: SWIFT.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-11 05:35:36 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
17 of 48 (35.42%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=4c5jt6bq25nyolfgw4cvvo5tzj2or4bomft5snpgl47fkdbiwgma._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar e0ba99f830d75b872ca6b7055abbb3ca74e8f02e6167d935e65f3e550c28b198

(this sample)

AgentTesla

Executable exe 0fca6f4fa44279707d8baca71d47f79687c62f528d0e872dc27c393e15567904

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0fca6f4fa44279707d8baca71d47f79687c62f528d0e872dc27c393e15567904
  
Dropping
AgentTesla

Comments