MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0b93b403f48d648cde9a5199304d54b3a1a92069d39660eb500c8172a77254ea. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 0b93b403f48d648cde9a5199304d54b3a1a92069d39660eb500c8172a77254ea
SHA3-384 hash: 046ce94d6620e931b3721cd1f8ce716373edc693d5b17a14cd8ceb4de57754bc2a17a94559892e975f55f415fb334766
SHA1 hash: 5f71c7c5c1bc520c807e04e98b143f4599ba4e26
MD5 hash: 8d53e91afcffa538e7ce2f0c76167ae2
humanhash: sad-black-mobile-shade
File name:ORDER_05292020.z
Download: download sample
Signature AgentTesla
File size:422'832 bytes
First seen:2020-05-28 05:21:16 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:qyjwN5eEb0k0gee6VgFt5yj2UlQNF8bHmry8IDcEdRk3WhT4COicIJ7ytWFVe3Dt:fyG5gtRwj2IQNF8bGGc6Vx4JIOW7boT
TLSH 5594233EEF964B56FD09D0047C6A698580B168CF8B351EC6232239D7FA4D3E5C24D1AE
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Frs
Status:
Malicious
First seen:
2020-05-27 22:56:41 UTC
File Type:
Binary (Archive)
Extracted files:
294
AV detection:
18 of 30 (60.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 0b93b403f48d648cde9a5199304d54b3a1a92069d39660eb500c8172a77254ea

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments