MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3273aa403b1e00fedf9058654cfa557be9a0ef9a7ff17fe9567737137f83968b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3273aa403b1e00fedf9058654cfa557be9a0ef9a7ff17fe9567737137f83968b
SHA3-384 hash: d88950f326ea1950ec9c75c0b19edb2b10be7e35f6f9832a55c11beb5430e3848e57fdd8d5670d32f31fc21f2c44a861
SHA1 hash: b29e040d5e1bb3b4ff401c0e3a2db6ca628e2f65
MD5 hash: 63a7f441d60a7dd43cefe06e5aa4602e
humanhash: kentucky-vegan-ceiling-two
File name:DHL.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:383'198 bytes
First seen:2020-05-13 04:29:15 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:JqIH4IuMUS3b9Ejdg0LDWD49AwQjZy3iM7t1qAO3Ot3hiQnFbafsgBmIy/Fvewnb:Qo2MU2EO0PWD49iwZ7t1qG3FU9bo
TLSH 8A8423BF934C97587E822705F97A9A0509BDDE169F9DA2D0D7EBA3F0D400CA1D3A4C48
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Siggen9.45979.18314.27444.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 04:35:23 UTC
AV detection:
25 of 48 (52.08%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gjz2uqb3dyap5x4qlbsuz6svppu2b342p7yx72kwo43rg74ds2fq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 3273aa403b1e00fedf9058654cfa557be9a0ef9a7ff17fe9567737137f83968b

(this sample)

AgentTesla

Executable exe 634c1e8a424853d26eb14bdece599130c1e2687669fad8bdd2a204f76d142bd0

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 634c1e8a424853d26eb14bdece599130c1e2687669fad8bdd2a204f76d142bd0
  
Dropping
MD5 562439d7375d4f0418243d8a16f41f40

Comments