🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 edbf6717c55e728a84bc2cd769bdb4037c7e822bdf3846e4ba53f0da42cbfac4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: edbf6717c55e728a84bc2cd769bdb4037c7e822bdf3846e4ba53f0da42cbfac4
SHA3-384 hash: 14e22ea88a84977181f3290c15dfc39c74e14313162ca63b0772d341b0c2441e90e58a211e5879e40d5334fb825b1fa1
SHA1 hash: 0ff731512722edf78e732f23fc165021d0a4cfae
MD5 hash: 70fe44366c3bdf11ae7dcbf77532edb7
humanhash: failed-nuts-video-lactose
File name:15 Km PVC 500 mm� AL cable.pdf
Download: download sample
Signature AgentTesla
Create hunting rule
File size:426'518 bytes
First seen:2020-09-13 07:29:30 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:wGZM10ytjU8hO7M8ZHEPg2LswAg4ryH8ZwsKD+ew:dqjU4O7M8ZN2QwAaH8Zwx6V
TLSH 6A942369C9CDCE8126C2763B37499E24C16B12933CE6AF45344CEE34C6A6EC27F4A103
Reporter cocaman
Tags:AgentTesla pdf


Avatar
cocaman
Malicious email
From: =?UTF-8?B?w5Z6a2FuIEFZRElO?= <�zkanAYDIN@hes.com.tr>
Received: from hes.com.tr (unknown [45.137.22.74])
Date: 12 Sep 2020 22:23:29 -0700
Subject: RE: wind power towers
Attachment: 15 Km PVC 500 mm� AL cable.pdf

Intelligence

File Origin
# of uploads :
1
# of downloads :
229
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/edbf6717c55e728a84bc2cd769bdb4037c7e822bdf3846e4ba53f0da42cbfac4/
Threat name:
ByteCode-MSIL.Infostealer.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-09-13 03:32:51 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
17 of 47 (36.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5w7wof6flzzivbf4ftlwtpnuan6h5arl344enzf2kpynuqwl7lca._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/edbf6717c55e728a84bc2cd769bdb4037c7e822bdf3846e4ba53f0da42cbfac4

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar edbf6717c55e728a84bc2cd769bdb4037c7e822bdf3846e4ba53f0da42cbfac4

(this sample)

AgentTesla

Executable exe 389fcb99816a8d82b01c2b5250bcd29204c90d9e4307bd5702ca6c82859305d6

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 389fcb99816a8d82b01c2b5250bcd29204c90d9e4307bd5702ca6c82859305d6

Comments