MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f14012c54c5f6cf3f840617e814eb8e8b65be0ed173e488c389037cd426cd4fe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f14012c54c5f6cf3f840617e814eb8e8b65be0ed173e488c389037cd426cd4fe
SHA3-384 hash: 291268c96d179afc6a46095c81fc42fcf39aefd42f473fd1baf3d7d17b4bc35034f83f83cb9635d5faa56f8ad205b0f5
SHA1 hash: b68a96fbe641e75e23aa31ae1b3446c5027a43d9
MD5 hash: 551f74f142fcdf9b8c5246936a54904d
humanhash: vegan-east-august-green
File name:New Inquiry.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:396'587 bytes
First seen:2020-07-01 11:19:39 UTC
Last seen:2020-07-01 13:37:48 UTC
File type: z
MIME type:application/x-rar
ssdeep 12288:dSaly4BDQupBfAQf5Xvc/ccz/azGUn/HEGcSvG:dSiymDQXQNck76U/HeoG
TLSH 7384238CC42DF620F09A9FADAE3C16960032E10DE3AD2402B37D5B33661D9665ECD779
Reporter cocaman
Tags:AgentTesla z


Avatar
cocaman
Malicious email
From: Purchase Assistant<Eric@unitedcorp.com>
Received: from unitedcorp.com (unknown [37.48.85.217])
Date: 1 Jul 2020 10:30:33 -0700
Subject: FW: New Inquiry Quote
Attachment: New Inquiry.pdf.z

Intelligence

File Origin
# of uploads :
2
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f14012c54c5f6cf3f840617e814eb8e8b65be0ed173e488c389037cd426cd4fe/
Threat name:
ByteCode-MSIL.Infostealer.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-07-01 06:37:30 UTC
File Type:
Binary (Archive)
Extracted files:
14
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=6fabfrkml5wph6camf7ictvy5c3fxyhnc47erdbysa342qtm2t7a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z f14012c54c5f6cf3f840617e814eb8e8b65be0ed173e488c389037cd426cd4fe

(this sample)

AgentTesla

Executable exe 27a90439a2d47290fe4d862d45e47e26652f095db3efcc5843cdcfbffc07390a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 27a90439a2d47290fe4d862d45e47e26652f095db3efcc5843cdcfbffc07390a
  
Dropping
AgentTesla

Comments