MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 61cbb47338a75e131d7ac69a51a796ee3274376c5bf0249088c7f77a25a57f90. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 61cbb47338a75e131d7ac69a51a796ee3274376c5bf0249088c7f77a25a57f90
SHA3-384 hash: 4ced24252b9351e0d1c8a57620c54ec7933b34d71d2dbcc6cdf189b2562ddb7c4c3ecec59db168592c25935b4c90189c
SHA1 hash: ef6bef219a84b4ed458b14b75518a673497eb3c4
MD5 hash: fb7941d5f791d63c195582f9426494f3
humanhash: salami-quebec-alanine-pasta
File name:shipping document.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:424'769 bytes
First seen:2020-07-06 18:17:47 UTC
Last seen:2020-07-07 05:31:50 UTC
File type: z
MIME type:application/x-rar
ssdeep 12288:fsSY8ANqhi6bmzifkX8EpyhmIVS4T1iV8/k2ySj:NgqhiFiMX8EYls/8M2ySj
TLSH C99423B511F8C44ECAA5F4E11D0CCF2A557637DEB4396F839200A88B0AD5367BA88B5C
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/61cbb47338a75e131d7ac69a51a796ee3274376c5bf0249088c7f77a25a57f90/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-06 18:19:03 UTC
File Type:
Binary (Archive)
Extracted files:
18
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=mhf3i4zyu5pbghl2y2nfdj4w5yzhin3mlpycjeeiy73xujnfp6ia._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 61cbb47338a75e131d7ac69a51a796ee3274376c5bf0249088c7f77a25a57f90

(this sample)

AgentTesla

Executable exe c6be88731d6b6921aa6b8931ccad19bd0b1028c9c2e03b7d9d6245d6cc5d6271

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c6be88731d6b6921aa6b8931ccad19bd0b1028c9c2e03b7d9d6245d6cc5d6271
  
Dropping
MD5 3f8e1c37e8354ae547c0b6f3f64022cd

Comments