MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 679930bf9490cfbd1cf35acbaee5e269c1d72b7f86e0b6a5fa1e3c2ab43e82c8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 679930bf9490cfbd1cf35acbaee5e269c1d72b7f86e0b6a5fa1e3c2ab43e82c8
SHA3-384 hash: 2e44474c1ffcf2e91eace29b7f85bbda8ca40be1cdb8a9139c799994636be8c52207393057b66f116a5ccbd67b33ff46
SHA1 hash: 68498b3f436735305c0da5e0bc9ff4824cab3413
MD5 hash: b293f3ca23dc6aaaee6316f962cd8a80
humanhash: april-sad-earth-delta
File name:Document.pdf.gz
Download: download sample
Signature AgentTesla
File size:1'059'807 bytes
First seen:2020-06-08 05:37:05 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 24576:lPE5TJJZKxsvJgFfSFqbqHhB1yBo/U29/U54tzXAJgjJ4UjtebA:l8eYJWKYbahBsm9/HdaIHebA
TLSH 8F3533F4455BCEFA5BB622C267358F3C1047207377AB3189750EA50A3DAC15A76B82CE
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Script-AutoIt.Trojan.Wacatac
Status:
Malicious
First seen:
2020-06-08 05:00:23 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 679930bf9490cfbd1cf35acbaee5e269c1d72b7f86e0b6a5fa1e3c2ab43e82c8

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments