MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0eef5145e7f0d797dda26b66ed612a09c936b0343bb2a9d9d33a95549908c06c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 0eef5145e7f0d797dda26b66ed612a09c936b0343bb2a9d9d33a95549908c06c
SHA3-384 hash: 92890df7ab9eff4c7d3c065f1393302985f7da41a87156e2cedf7922fa4ed3ce4fb120d6a23c218993b2f5f3b162048f
SHA1 hash: 546512bb341abc2ec8b0268416f009831ec33ae2
MD5 hash: beb37c22220f541db2217eb939adceb8
humanhash: ohio-texas-mango-beryllium
File name:SC 20000_7_15_2020.gz
Download: download sample
Signature AgentTesla
File size:381'892 bytes
First seen:2020-07-15 18:11:30 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:E4pjb+Nu0C3JXz0IOiOV9LkFLPH77Mazxrz77uWHF8mR99tdO3zcrD8DdmB5gLJs:EWjX3JD0n8Z7wazxvP1HC699tdD3SJoL
TLSH 388423D9C0A2341FE968B71637029C8E508CE76B619EE717066D63B630E1F175B373A4
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Status:
Malicious
First seen:
2020-07-15 18:13:04 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 0eef5145e7f0d797dda26b66ed612a09c936b0343bb2a9d9d33a95549908c06c

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments