MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5092482b300fb3a053d610cdf108b3340c11738942dea7df4b9d42e994419968. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 5092482b300fb3a053d610cdf108b3340c11738942dea7df4b9d42e994419968
SHA3-384 hash: a0af13d821bdd6e3551c14793e342f7145205d0173e6c8765de19ffba037dbc4276748d9dfa2aff94fb3b9e2cca2ff5d
SHA1 hash: e8c5cd152f12e6eeebb74114ac6360aac07e4802
MD5 hash: d4dc64e0d606b30c5ba674b86a62f426
humanhash: mississippi-chicken-alaska-happy
File name:Enquiry06042020.rar
Download: download sample
Signature AgentTesla
File size:398'202 bytes
First seen:2020-06-04 07:58:29 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:Wpy5M0TM1gIOe8GawAl3dXbKULYcnM5S/sj:xMX1IEahbKUUcM5S0j
TLSH EB8423129609361E1F00F1E56427DE57B98EA898F29E9C04A03F1BD16DAFD0D2FD8F44
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Status:
Malicious
First seen:
2020-06-04 08:35:26 UTC
AV detection:
18 of 30 (60.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 5092482b300fb3a053d610cdf108b3340c11738942dea7df4b9d42e994419968

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments