MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e96edb7b5c00ce9357eb7a0138b36e5322e432122c3f1ae24d3b42fcd1605e14. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e96edb7b5c00ce9357eb7a0138b36e5322e432122c3f1ae24d3b42fcd1605e14
SHA3-384 hash: 154399096413a4fd4413218a651a190d1066dc9c2f9c9b63dd830b510345ed7e7638a87b5069ff645b08bb222c2e55f6
SHA1 hash: fde2126d07567cbbca13aaf56f602eea790ccf8a
MD5 hash: 25e562924d2c754cd93f6566bffc3d19
humanhash: chicken-kilo-august-diet
File name:TNT_Parcel-Delivery.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'235'451 bytes
First seen:2020-04-20 11:43:45 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:Dpc6yxMOMqw7eFb5Dl/1LVGl3vt3bSay2VjaTA+8ps502JPTglwZYuHJ:DpTyxMOJw7e55hZ03vt3bPy2FaTQG0GP
TLSH DA4533E61568484D80499BA0EFE8389A18433A7DDF0A7ACFE68F556F73CD1BB412D341
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: eInvoicing <a.koohestani@fortuna-co.com>
Received: from zomorrod.dnswebhost.com (zomorrod.dnswebhost.com [185.55.224.141])
Date: Mon, 20 Apr 2020 12:21:30 +0100
Subject: TNT Parcel Delivery//Notification

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Predator
Create hunting rule
Status:
Malicious
First seen:
2020-04-20 12:35:29 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5fxnw624adhjgv7lpiatrm3okmroimqsfq7rvysnhnbpzulalyka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar e96edb7b5c00ce9357eb7a0138b36e5322e432122c3f1ae24d3b42fcd1605e14

(this sample)

AgentTesla

Executable exe 9c855a81fc64176ff278af29291f27501b413b8d5ead754f13f536355af4e1a3

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9c855a81fc64176ff278af29291f27501b413b8d5ead754f13f536355af4e1a3

Comments