MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f57a074d36409aa4a2d581fc896b81237ba59b2f4a026afb5fdd0deabd7679a8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f57a074d36409aa4a2d581fc896b81237ba59b2f4a026afb5fdd0deabd7679a8
SHA3-384 hash: 799b6532043947cb8280e40b50966cc1733f60f23077aa9da6aae38d7e1b8cd4974aac062903ffd1672ca51bb62df47d
SHA1 hash: 0fa20e66e72947760ec5537588e6f6ef857b1089
MD5 hash: ffe3918f8b3660d6cd51d831f6111729
humanhash: mississippi-florida-princess-magazine
File name:hitno narenje.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:387'788 bytes
First seen:2020-06-16 10:48:56 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:IA4AS7HnD21rzHbzRx3dU9lJc3VRNYPrAcJfgJDhsxvdDTxfm9UMmNYTday+qXMe:HS7irzHb5ClJc3VXYP0J1yxvdfxOqM5J
TLSH 6B8423B6B4BFD560D019CE35A690179705AAAF4235F9C28ECEB4BBB701DE1DDD482308
Reporter abuse_ch
Tags:AgentTesla zip


Avatar
abuse_ch
Malspam distributing AgentTesla:

From: marko stefanovic <dejan.vukic@adamsped.co.rs>
Subject: Fwd: Re: Re: novi nalog za kupovinu
Attachment: hitno narenje.zip (contains "hitno narenje.exe")

AgentTesla SMTP exfil server:
smtp.yandex.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BehavesLike.Win32.Generic.gc.16372.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-16 10:50:07 UTC
AV detection:
24 of 31 (77.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=6v5aotjwicnkjiwvqh6is24ben52lgzpjibgv6273ug6vplwpgua._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip f57a074d36409aa4a2d581fc896b81237ba59b2f4a026afb5fdd0deabd7679a8

(this sample)

AgentTesla

Executable exe ba4c72b934177106117b877643418c2346bfc68aaf8eee80301cd2620fb48c4a

  
Dropping
MD5 55a17bfcef2bdb7150f946a385c0e796
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ba4c72b934177106117b877643418c2346bfc68aaf8eee80301cd2620fb48c4a

Comments