MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 02a80af41d499574db65a553d8ee8ab5114efdc5de448ef2942c67626548a25c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 02a80af41d499574db65a553d8ee8ab5114efdc5de448ef2942c67626548a25c |
|---|---|
| SHA3-384 hash: | 6f748999d69c2c01cefbaaba8770736f6c2844272e4c75488190d0edf7974ab764933e7456ee2419d2c27a3195244125 |
| SHA1 hash: | 2a58e089379259bca523263a78d0a87fa9e37074 |
| MD5 hash: | 64c86c324ea5be5879e56344102a8c59 |
| humanhash: | triple-failed-maine-jupiter |
| File name: | Proforma Invoice 02341 - 50% Advance payment against proforma order confirmation.rar |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 271'731 bytes |
| First seen: | 2020-06-11 13:08:59 UTC |
| Last seen: | 2020-06-12 09:20:18 UTC |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 6144:hyG76EACYRJXVecHss7fYVrbxvxLI5RD3CDB0i29Ucj:hyQYRJXXHFgdtMtCiin8 |
| TLSH | 59442314906EB6FBAEF440C0B23FEBDA3E13725D0ADEB14C63C6255680DD3D539A5190 |
| Reporter |  cocaman |
| Tags: | rar |
Intelligence
File Origin
# of uploads :
2
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-06-11 13:10:09 UTC
File Type:
Binary (Archive)
Extracted files:
15
AV detection:
18 of 31 (58.06%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.