MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 65ac1eca2f140e0a797be95a1c44a3e3cf54c8f028a03e18eb7db5b0b6d84099. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 65ac1eca2f140e0a797be95a1c44a3e3cf54c8f028a03e18eb7db5b0b6d84099
SHA3-384 hash: aff85d287c4d5c9a2f1ad064498486ef7f5f5e0594d41df036386327709e09f04c2ab056eb3de3c9d93f4278b63fb9d3
SHA1 hash: 67703342fc860c586b5c3beae6fd9ba4c776ff0c
MD5 hash: bc02291f7ec715e27b35690915177916
humanhash: carpet-oven-august-ceiling
File name:Shipping DOC.rar
Download: download sample
Signature AgentTesla
File size:1'007'630 bytes
First seen:2020-06-01 13:08:34 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:Bt3LNu0In/+Uhpv5M2SMI6I9bty6HNtpq6phTgDFo9e:DLm+UhJ5AMo9gGNtY6pV6o9e
TLSH 2C2533F0AE7B8A1C11637C9AC1AD844235C7F1BD1D722915A1743CBB7E662C135AC26E
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-06-01 12:52:22 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 65ac1eca2f140e0a797be95a1c44a3e3cf54c8f028a03e18eb7db5b0b6d84099

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments