MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 05a70ef45667103bd27bbc2b1be8c2af605b014db37d69aa3c72f26c86548f4f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 05a70ef45667103bd27bbc2b1be8c2af605b014db37d69aa3c72f26c86548f4f |
|---|---|
| SHA3-384 hash: | 3fe9ff93bf5754e5bf31b1436eb2a3376775603f9fabdf64e35c669fd673e239c686944082c4fb405d26378760c14b9e |
| SHA1 hash: | 32068d386811146abcf0f8135af685575c657e24 |
| MD5 hash: | 5a2b312742954710bd55de84ea7e7b00 |
| humanhash: | fanta-nuts-lion-seven |
| File name: | Q88.MV_ TBN.rar |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 532'628 bytes |
| First seen: | 2020-06-18 05:47:21 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:HM7uTj/mpJLy14fu2FIWFGlEkQ7pOiT5FSK4XsvjnkXDQJ:IOiJSqBG2PlSsLnmDQJ |
| TLSH | 0EB423930D94AB64BFA277CD0D4F0534C8C706A4F972AEB29B075E1A1E6C1E743472B5 |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Status:
Malicious
First seen:
2020-06-18 05:49:03 UTC
AV detection:
17 of 31 (54.84%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.