MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0222cbaa612cd10bb0784ed4cc4b68a925d81376034e77afe7f3cad3aa2d4e43. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 0222cbaa612cd10bb0784ed4cc4b68a925d81376034e77afe7f3cad3aa2d4e43 |
|---|---|
| SHA3-384 hash: | f04fd26849a652d170ecc5a655617f520cc83f18cea35b4ac1b3bfecc959dca21356c909f9673a254c3fd2b39a139f01 |
| SHA1 hash: | f3a065897a5d4b31a67684868d1bc6fbb6c981a4 |
| MD5 hash: | 16add6ffbe4375582502f769f553ee15 |
| humanhash: | summer-berlin-august-may |
| File name: | SALES CONTRACT INVOICE.Z |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 424'315 bytes |
| First seen: | 2020-04-21 13:08:01 UTC |
| Last seen: | Never |
| File type: | z |
| MIME type: | application/x-rar |
| ssdeep | 6144:NyDMsGayCbT/tMrCBRzKIXKWaLjnuJ5eWKN8wsc1Btm8HuZMp8ivd0ALL3TFz:UPtrBUhb3nu1uNvdBOi9Lbpz |
| TLSH | A0942359BD198703B789B0024F79C12E617E82A3FEDADBF25C65DC7F21B48979027188 |
| Reporter |  cocaman |
| Tags: | AgentTesla z |
Intelligence
File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-04-21 13:35:32 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
21 of 30 (70.00%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.