MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f7305462a5f0898a7f530c17ee11cc6d40cdd50c5bc8951f55c43f6683d526ef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f7305462a5f0898a7f530c17ee11cc6d40cdd50c5bc8951f55c43f6683d526ef
SHA3-384 hash: 85ebb279a3210142b7f6c4f139f7dd0250f8206e8668e7fe0e886e3da0c87b6c3c084fbf3965aef0a18cc4d4fb855d47
SHA1 hash: 6d90c07cbfc8b74442a677bec7ac9a7826888343
MD5 hash: e4422fcb71ed65974a2508f3e4ef6bb6
humanhash: oregon-jersey-fourteen-grey
File name:products 2346067.xz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:294'070 bytes
First seen:2020-10-21 08:51:45 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:PNSWT8dQNxFpvM/wFaNShv4Fxa1oPaCuzGvFNiATn:PgWT8uNzC/w4NBb6CuzGtQYn
TLSH D25423D4E2BE5BF44FF0FA6C4BC05549965CA63496ED246E0B8F848F099FA0A7211F21
Reporter abuse_ch
Tags:AgentTesla xz


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail.bangla.net
Sending IP: 203.188.252.3
From: info@megagroup.com.bd
Subject: PRICE REQUEST FOR PRODUCTs Catalogue
Attachment: products 2346067.xz (contains "products #2346067.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.32039.6022.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f7305462a5f0898a7f530c17ee11cc6d40cdd50c5bc8951f55c43f6683d526ef/
Threat name:
ByteCode-MSIL.Backdoor.Crysan
Create hunting rule
Status:
Suspicious
First seen:
2020-10-21 06:57:27 UTC
AV detection:
7 of 48 (14.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=64yfiyvf6ceyu72tbql64eomnvam3vimlpejkh2vyq7wna6ve3xq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip f7305462a5f0898a7f530c17ee11cc6d40cdd50c5bc8951f55c43f6683d526ef

(this sample)

AgentTesla

Executable exe eb713efde68d016c3358152149fe1b6f4bf507bc6a90b812bef0a8e6a91780a4

  
Dropping
MD5 a10ab4b94e09996c550e943049053aa7
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 eb713efde68d016c3358152149fe1b6f4bf507bc6a90b812bef0a8e6a91780a4

Comments