MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3515a0f9020685a432863afd441202a2a4bfa46bbbbf3f8a6a8c945ea7df3ebb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 3515a0f9020685a432863afd441202a2a4bfa46bbbbf3f8a6a8c945ea7df3ebb
SHA3-384 hash: adf735e82fe72dd31d4fc12c1569bef000c9919a6d1babdb932798c8f7097c80a5f7218e969b9a0f9e2e71dbcd936aa9
SHA1 hash: a702db5fa9839a473c3c20f34c7bbb6e605f0663
MD5 hash: e8f460c4a6dc84518a2e14927d9e0111
humanhash: helium-maryland-ink-speaker
File name:Quotation Request.7z
Download: download sample
Signature AgentTesla
File size:398'079 bytes
First seen:2020-07-08 09:08:24 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 12288:RVcQrluHjmdzqaqEiibV0WO8Pz8qbNjVQIL/nMh1Q24:UQ0HjmdHqEiY0cr8UZlMh1Qj
TLSH A4842338D68BA041F8F584371D3880F7113C35291E37D1DE0A6A9D75E6990BD26E8E7B
Reporter jarumlus

Intelligence


File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-07-07 17:59:47 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 3515a0f9020685a432863afd441202a2a4bfa46bbbbf3f8a6a8c945ea7df3ebb

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments