MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3d50b2bf9fe4bf83c8c5a7247bd83f95254d30d59fc473db9764602d37600bf6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3d50b2bf9fe4bf83c8c5a7247bd83f95254d30d59fc473db9764602d37600bf6
SHA3-384 hash: 01bdbeef8f314aeadb28acf8565166deb79ede27514a900f65284a78a065409f13dabf915c284f9901859a1404046b86
SHA1 hash: 9111b686cb1fd720f08108d5779c8d13dea75a02
MD5 hash: 756c6542b843be65640ccf53451570eb
humanhash: coffee-may-low-berlin
File name:Products Enquiry Pdf.daa.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:353'301 bytes
First seen:2020-03-18 06:22:07 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:OcbMMM6DI6jDcm6GcCsHcK8RkcD0a5w1F20x2crFjM/lzshkTV:OcbM+U6vcmhfsluP0acFJ7rFjuskx
TLSH A07423430977B65AC96B02AE947E52E9126ED1F4CB684D310CC9550B33A6ADF238CF2D
Reporter cocaman
Tags:AgentTesla zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Win32.Wacatac.Cml.13836.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Nanocore
Create hunting rule
Status:
Malicious
First seen:
2020-03-18 13:35:50 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
21 of 31 (67.74%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=hvilfp474s7yhsgfu4shxwb7susu2mgvt7chhw4xmrqc2n3abp3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/3d50b2bf9fe4bf83c8c5a7247bd83f95254d30d59fc473db9764602d37600bf6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 3d50b2bf9fe4bf83c8c5a7247bd83f95254d30d59fc473db9764602d37600bf6

(this sample)

AgentTesla

Executable exe 133a4e4836245a58ec3415472f0f2c31c40c2c1f013321d77af5d6e6d1c1dea7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 133a4e4836245a58ec3415472f0f2c31c40c2c1f013321d77af5d6e6d1c1dea7

Comments