MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4b583c2e8c04241e487980dc90b1d7db22f8b88d78299925ed38991d92fefd1e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 4b583c2e8c04241e487980dc90b1d7db22f8b88d78299925ed38991d92fefd1e |
|---|---|
| SHA3-384 hash: | 50a11559a74fe31c1ede3f28dfb74ffcbbdd0b074d3c1d50bfe9367c4be79adc42f02f68beeb264283f61ce4313d920e |
| SHA1 hash: | 873f5f8ef8463490f87d9c6dd9916eba51ddad38 |
| MD5 hash: | 831fa975a3da6cbe029d4a4f691e4b1a |
| humanhash: | princess-equal-alanine-thirteen |
| File name: | NEW ORDER .pdf.z |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 388'446 bytes |
| First seen: | 2020-07-03 03:18:47 UTC |
| Last seen: | 2020-07-03 05:38:33 UTC |
| File type: | z |
| MIME type: | application/x-rar |
| ssdeep | 6144:Wias4Mqwfd7dQNb8tVbIQJ/BW5NSwheAp0jYvqrAjea9fIUgzxBdrNhCfCAzg+7x:JaSfNmNbMVV/8NSwhedjYqrta5+hufCC |
| TLSH | 658423AD12C074222C0F02566B7DD56317890B1CB909B9526D3AF8C79E19E94CDBCFA9 |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
2
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.Wacatac
Status:
Malicious
First seen:
2020-07-03 01:25:33 UTC
File Type:
Binary (Archive)
Extracted files:
13
AV detection:
16 of 28 (57.14%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.