MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ef6a7ed2f51795026e180be7c3a9981206e08d3e1054009e770a5591411c2d8f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ef6a7ed2f51795026e180be7c3a9981206e08d3e1054009e770a5591411c2d8f
SHA3-384 hash: 237447752c6df74d087fc6f51b5b4747517959efce01ff01e59938ffdf00b5a47270ee9bdafd54697d7d3b986e95cce6
SHA1 hash: 589b0f9baa44a2e6253f22bb4909be9f90d1cd04
MD5 hash: 95d93093c70bb52b6dfa3f6c3c81188f
humanhash: helium-lion-mobile-fish
File name:Scan 06052020.uu
Download: download sample
Signature AgentTesla
Create hunting rule
File size:442'853 bytes
First seen:2020-05-06 06:18:57 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:43dd7nZvhyMLyX15XzXnchoaJkJHVyfvl4wR+c5Ui4voAFWj126SIoGa2pDC9BGg:47Zvql3cCbPK9NBY+2FwdC9BG1W+XfTy
TLSH BC9423821D0ED732DCAAEE4D4FE9686C65C45EFBC9000D8AE963DD8C69D3F1C16446AC
Reporter cocaman
Tags:AgentTesla uu


Avatar
cocaman
Malicious email
From: Ali Shehab <poonam@mafemobile.com>
Received: from mafemobile.com (unknown [95.211.208.50])
Date: 6 May 2020 04:44:00 -0700
Subject: RE: Pending Orders
Attachment: Scan 06052020.uu

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-05-06 06:35:31 UTC
File Type:
Binary (Archive)
Extracted files:
6
AV detection:
21 of 31 (67.74%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=55vh5uxvc6kqe3qybpt4hkmycidobdj6cbkabhtxbjkzcqi4fwhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar ef6a7ed2f51795026e180be7c3a9981206e08d3e1054009e770a5591411c2d8f

(this sample)

AgentTesla

Executable exe 1fba149abdd13bb0e795a4c0d05eeeae6dcac70bf6168e21ac10c74453b62ba8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1fba149abdd13bb0e795a4c0d05eeeae6dcac70bf6168e21ac10c74453b62ba8
  
Dropping
AgentTesla

Comments