MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1cc14a6e5a9d6804c8b0981202c70f40f278034af46410f7a1992e6f458167d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1cc14a6e5a9d6804c8b0981202c70f40f278034af46410f7a1992e6f458167d3
SHA3-384 hash: abe2be274ee7511c955b6e920e6805d455cb6b7dfbe3c228f3056dffd0b82f638b4650646d810830dcf35a23ad52b025
SHA1 hash: 0c7bb40b087c9c3bef7ac96dfad81c47f12bc711
MD5 hash: f10c402ee65e9b323dda7b2f0ed7c754
humanhash: gee-leopard-purple-arkansas
File name:Packing List.xls.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:450'354 bytes
First seen:2020-05-11 06:24:30 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:btO24AvARaKmENESEWaXiJFHjnoesY6J0QS:ZQAvAsENeVML5ZY6
TLSH 69A423C87FFEBAEC2C715792AFE11630B84B1447F659F8A15CDA688B7D09092D009F58
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-11 06:35:31 UTC
File Type:
Binary (Archive)
Extracted files:
23
AV detection:
18 of 48 (37.50%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=dtauu3s2tvuajsfqtajafrypidzhqa2k6rsbb55btexg6rmbm7jq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 1cc14a6e5a9d6804c8b0981202c70f40f278034af46410f7a1992e6f458167d3

(this sample)

AgentTesla

Executable exe ca8bee78548af15a74451cdf1b85cd25033cd76d340f974d98b315f2d4cc7110

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ca8bee78548af15a74451cdf1b85cd25033cd76d340f974d98b315f2d4cc7110
  
Dropping
MD5 b85c55774053bf066038312a45d4c62a

Comments