MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f3e94c7ee6bbbf03320239f1ebb40ca754a83f03f56cd504779ea03c3c60a011. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f3e94c7ee6bbbf03320239f1ebb40ca754a83f03f56cd504779ea03c3c60a011
SHA3-384 hash: b2e8ab926ac83cfa68288507d92f5df9061f840d6bf240d432d2d89e43f080729eb3a1bb581d75b83a8a80e531cb54fb
SHA1 hash: 954b70ebe430ed99fad27a8a92ef833064e947f1
MD5 hash: f4b0fb5c748148e2b576666cf458d6b0
humanhash: sixteen-aspen-mexico-neptune
File name:Sample Order.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:380'171 bytes
First seen:2020-11-18 12:18:07 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:FwRCR4GLcigRO8is8O3zHVs7Wj3IUxqBjnR8/dMte5kj6jrO6uMtbN/d:FweqigQO3jVs7W10R8/dMzWjLuyz
TLSH CB8423830454213D6A7B82DF62B0D9FCD873DA8BD104E8776ECA8B2ECAD5755032D58A
Reporter abuse_ch
Tags:AgentTesla gz


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: server3407.uncscloud.com
Sending IP: 51.91.75.135
From: Amanda Chen <info@fasttrans.org>
Subject: RFQ: Sample Order
Attachment: Sample Order.gz (contains "Sample Order.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f3e94c7ee6bbbf03320239f1ebb40ca754a83f03f56cd504779ea03c3c60a011/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-11-18 12:19:06 UTC
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=6puuy7xgxo7qgmqchhy6xnamu5kkqpyd6vwnkbdxt2qdypdauaiq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz f3e94c7ee6bbbf03320239f1ebb40ca754a83f03f56cd504779ea03c3c60a011

(this sample)

AgentTesla

Executable exe b2ec3cbaca68c03cabfbd50b7b94908971b26a52e5eacd80d499844944929c1b

  
Dropping
MD5 9e142259a1b2273af64b44085e03a58c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b2ec3cbaca68c03cabfbd50b7b94908971b26a52e5eacd80d499844944929c1b

Comments