MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f2453ad2fcd62cc6147282696c341611c21310ee9d9e2a326abb73f07a11977. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 3 Yara Comments

SHA256 hash: 3f2453ad2fcd62cc6147282696c341611c21310ee9d9e2a326abb73f07a11977
SHA3-384 hash: 044d9d2e063205bf1a3171e50a28b0edceff209bc690564b76da398720d7edd122fcb31c821abf9f3dadca759a751e46
SHA1 hash: ecdfdad090bf83f07d9285d03aefd03f871ac98e
MD5 hash: 526657aa3312ca79deb0baa6e9cd1f05
humanhash: oven-high-kitten-sodium
File name:Appointment_Letter_ANCASH QUEEN.pdf.rar
Download: download sample
Signature AgentTesla
File size:373'546 bytes
First seen:2020-06-30 06:00:51 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:8uRvO5LKh00NXUh9z238KxcuuYrGLsePZFvtNFj8dd6GpqHXuW7rD:8uxO5LSQnzMrKhbF/jkdxpaesrD
TLSH 0884238094DC13CCA30720919A05F83A265BA3B5F42FD52D786FE28169F7BBDE087D56
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
Global Medium
# of uploads 1
# of downloads 30
Origin country US US
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 06:02:06 UTC
AV detection:16 of 30 (53.33%)
Threat level:   2/5
Spamhaus Hash Blocklist :Suspicious file
VirusTotal:Virustotal results 11.48%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



rar 3f2453ad2fcd62cc6147282696c341611c21310ee9d9e2a326abb73f07a11977

(this sample)

Delivery method
Distributed via e-mail attachment