MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 49315131d6f74bfc7f35ea28265eeba7a1672aa934dd4605cd07d3502954b387. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 49315131d6f74bfc7f35ea28265eeba7a1672aa934dd4605cd07d3502954b387
SHA3-384 hash: d2088943af6ab38f2f4b583ce547bd7c77f9f8064fb80b90129c69c3097442f038650e5e6af4e06f912b368f23d5d5b9
SHA1 hash: ca2b3a83a273675e69b54276ba1b30adde90fce7
MD5 hash: 5fe9dcca4cfd2f33c37c632afeeac7c4
humanhash: missouri-romeo-violet-ack
File name:invoice (2).zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:527'084 bytes
First seen:2020-06-23 05:23:44 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:/sXVtieDXBRjiTn8G8keoeaNIPXQJ5muI9MCOu0d/T:GVtiejBReTn8Gw4nEb7mL
TLSH 61B423EFB30A766A599E04602F62F3701AD44C24CFF11BC25B0486CF8689EED529E7D5
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic.mg.08dca873988dcf0c.7936.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/49315131d6f74bfc7f35ea28265eeba7a1672aa934dd4605cd07d3502954b387/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 01:31:58 UTC
AV detection:
23 of 31 (74.19%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jeyvcmow65f7y7zv5iucmxxlu6qwokvjgtoumbona7jvakkuwodq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 49315131d6f74bfc7f35ea28265eeba7a1672aa934dd4605cd07d3502954b387

(this sample)

AgentTesla

Executable exe 361df840f755828b47108104d9da4a9614d9c961f913c89c12027799150568df

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 361df840f755828b47108104d9da4a9614d9c961f913c89c12027799150568df
  
Dropping
MD5 781af3413205e9e6bcee1f19ce07da63

Comments