MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f650b5b28a366a292565a94f48b3b61d0f12535cf9b33917ac88e65c7949dc2d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f650b5b28a366a292565a94f48b3b61d0f12535cf9b33917ac88e65c7949dc2d
SHA3-384 hash: 724ea9a2b9f1515218e939cb149f765267561cefe208dd2a620177894f77a2c38bcfab67ff1ee74c598f8e3a54c97137
SHA1 hash: 26dfb9b321568a7bca69e3e79b11353bd2afa77f
MD5 hash: 5e809c557856ec175937a964955eb64c
humanhash: hot-winner-lamp-hotel
File name:Statement of Account.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:525'973 bytes
First seen:2021-03-03 10:47:42 UTC
Last seen:2021-03-05 14:59:41 UTC
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 12288:fUPR/UFmVYkahQ/M0rfS1/wFh0A0MhulYDIKOkMQGqxj22Lgf:fMAmVU/efS1/wF62hQYslhqxC2LA
TLSH 47B42332D1BFE3F9D27845B045CA573885AB2F8B374669E180D04B7FADA4C27D4B5A20
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
4
# of downloads :
114
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.36436383.14358.17461.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f650b5b28a366a292565a94f48b3b61d0f12535cf9b33917ac88e65c7949dc2d/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-03-03 10:48:22 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=6zillmukgzvcsjlfvfhurm5wduhreu247gztsf5mrdtfy6kj3qwq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
AgentTesla
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/f650b5b28a366a292565a94f48b3b61d0f12535cf9b33917ac88e65c7949dc2d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z f650b5b28a366a292565a94f48b3b61d0f12535cf9b33917ac88e65c7949dc2d

(this sample)

AgentTesla

Executable exe d14fcc47dbb1485202b6df1ec654b469047311105ac7c4c02b2bf0e1d8ffaa52

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d14fcc47dbb1485202b6df1ec654b469047311105ac7c4c02b2bf0e1d8ffaa52
  
Dropping
MD5 3f1b98d7aff225627380a7975d25bf1a

Comments