MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fd32b61621e5ae2744f6bcb57114c63aed449b8c54414f676263096553cc6634. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fd32b61621e5ae2744f6bcb57114c63aed449b8c54414f676263096553cc6634
SHA3-384 hash: 843fe8f45cb06c045773b123d10d9017b552846e16361fc425173de6a4eee1de4ec158176c653285f376a106b4756fbe
SHA1 hash: 7ce3520b82b823486ff417fc6cda2f65475155fb
MD5 hash: 8456d7f482795b816eaa14356673afc0
humanhash: carpet-carpet-march-nuts
File name:New Order Quotation.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:382'781 bytes
First seen:2020-06-08 08:58:42 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:R9hpABPd0Z8DtKai0+8wXn81cOqOsPVYqC6+iJuh56OOFjYU78Z3Ak+5TZ+D2S9p:TEBW4tRi0+8rhsPFO0jYU7keHW2j6KIv
TLSH C08423538A101F12796FCADFA5F2284B2435D86CA9CE7FE80F7270AF6CE11954297C25
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22623.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-06-08 09:00:06 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7uzlmfrb4wxcorhwxs2xcfgghlwujg4mkrau6z3cmmewku6mmy2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip fd32b61621e5ae2744f6bcb57114c63aed449b8c54414f676263096553cc6634

(this sample)

AgentTesla

Executable exe 6ba3af6d5aa3b7a36c1976d2ae90e6cde46e7249813d707ac2ea7a73a26797b3

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6ba3af6d5aa3b7a36c1976d2ae90e6cde46e7249813d707ac2ea7a73a26797b3
  
Dropping
MD5 73331ce180aeb1111916cbf2930f6b22

Comments