MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5499699354a5143d59dcf888248beac94288066aa88ae96e0fd4aa910c4b344a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5499699354a5143d59dcf888248beac94288066aa88ae96e0fd4aa910c4b344a
SHA3-384 hash: c2012b8fff977edd4680ca8d09f01ecf21d370ab0ca3c277316f2da2ec25e972bc64ac80ea1026c84e61315f84418468
SHA1 hash: 0ae87544b1be1eb3594f225fbee3156cadf8f047
MD5 hash: aae59437edb8e16929b727b3b8e622e0
humanhash: violet-lima-alaska-tango
File name:COO 20.06.22.GZ
Download: download sample
Signature AgentTesla
Create hunting rule
File size:379'895 bytes
First seen:2020-06-22 05:12:41 UTC
Last seen:2020-06-22 13:19:01 UTC
File type: gz
MIME type:application/x-rar
ssdeep 6144:q2WRYIpkQkPRr9TO+vsyaVCUD+gKZ+r7X7g6v3RYca8:qVYIpkQkPRpO+vlaVCUCgKAr7LgMWcZ
TLSH 8F84238F69D67AB2CC7BA1A60187C35BCC3BEF1D3AC70216BA2140917781595EC66D0F
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
4
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20200622-1055.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5499699354a5143d59dcf888248beac94288066aa88ae96e0fd4aa910c4b344a/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-22 05:14:03 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ksmwte2uuukd2wo47cecjc7kzfbiqbtkvcfos3qp2svjcdclgrfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 5499699354a5143d59dcf888248beac94288066aa88ae96e0fd4aa910c4b344a

(this sample)

AgentTesla

Executable exe 460d3ea4ea000e3a06e7ee2a1cdcda2579b808e6fd5a925f76ebfdbb0d3b4d63

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 460d3ea4ea000e3a06e7ee2a1cdcda2579b808e6fd5a925f76ebfdbb0d3b4d63
  
Dropping
MD5 63715df92e440437613896094c291a10

Comments