MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0a79262d765c1ae53a1c456334dbbc213fae56ce4f9b22e6bdd62c2a842ae3b5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0a79262d765c1ae53a1c456334dbbc213fae56ce4f9b22e6bdd62c2a842ae3b5
SHA3-384 hash: 93e772ae640cbb277a06b0a513e142c78c09210edfa41b422e724262edc3d14524956a4b32e92370cce3f901dd582c71
SHA1 hash: 7d80895c04ea472e328ea851878988f037b3de47
MD5 hash: 992e8fcf690f041d6425636ec89729b3
humanhash: pasta-king-bluebird-muppet
File name:Confirm Bank Details.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:375'522 bytes
First seen:2020-07-23 14:46:15 UTC
Last seen:2020-07-23 22:57:56 UTC
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:wM3xSDIqP2E0o3zCLPP0sOOyPxpDkT+1TMlIg9V+dn9xrGkyTMyaySdElQoJNkNH:N3xa9193uPP0sTyJpgtL+j9PRC+oJ6Ks
TLSH 47842342E22C3B86BA8553FCDB7F9203F47FDB7659205E0411DB05CAE2A7A4119E5A0E
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader34.3183.31302.11149.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0a79262d765c1ae53a1c456334dbbc213fae56ce4f9b22e6bdd62c2a842ae3b5/
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-07-23 14:48:07 UTC
AV detection:
25 of 48 (52.08%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/0a79262d765c1ae53a1c456334dbbc213fae56ce4f9b22e6bdd62c2a842ae3b5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 0a79262d765c1ae53a1c456334dbbc213fae56ce4f9b22e6bdd62c2a842ae3b5

(this sample)

AgentTesla

Executable exe 96a3201fa6c5771d32d5ca7d7caee1cf66dfc635b5b2466d1eb5c4f105b6446a

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 96a3201fa6c5771d32d5ca7d7caee1cf66dfc635b5b2466d1eb5c4f105b6446a
  
Dropping
MD5 d9bd911bcf5a9b6b29d10e805b8bb877

Comments