MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6a22f447f1f33ab89c601e610999524ccb6d764361d3bdadaedd2c3b8d6b7184. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 2 File information 3 Yara Comments

SHA256 hash: 6a22f447f1f33ab89c601e610999524ccb6d764361d3bdadaedd2c3b8d6b7184
SHA3-384 hash: df1598d246fb3ead009f68208659b585e37c16d41c23f1ee8742643a4f957a8f24e1895711fadde70d3fb5606847f7a6
SHA1 hash: 6d00c8550011e0214ca6fd98f2ea88f00a1c3d14
MD5 hash: 2ee84ea7892cca7b876be47b2c0e4028
humanhash: lithium-august-delaware-lemon
File name:DHL_1.EXE
Download: download sample
Signature n/a
File size:443'904 bytes
First seen:2020-06-30 07:16:06 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c458ff2d515beb8f44158cd3636a7400
ssdeep 12288:3WNsJgz/NoWUcxzhSlGpmHteOrSJOfgrxTV02Mdbs:3+y4VVtJS4MeESJRTXMdo
TLSH A994229ECBC04EF2E458A57700639D254288E0617B5FAB831F12AC4CFE356D79AB4E71
Reporter @cocaman
Tags:exe

Intelligence


Mail intelligence
Trap location Impact
Global Low
CH Switzerland Low
# of uploads 1
# of downloads 30
Origin country FR FR
CAPE Sandbox Detection:n/a
Link: https://www.capesandbox.com/analysis/16879/
ClamAV PUA.Win.Packer.Upx-49
PUA.Win.Packer.UpxProtector-1
PUA.Win.Packer.Upolyx-12
PUA.Win.Packer.Upx-6
PUA.Win.Packer.Upx-4
PUA.Win.Adware.Slugin-6803969-0
PUA.Win.Adware.Slugin-6840354-0
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/6a22f447f1f33ab89c601e610999524ccb6d764361d3bdadaedd2c3b8d6b7184/
ReversingLabs :Status:Malicious
Threat name:Win32.Trojan.Injector
First seen:2020-06-30 07:18:06 UTC
AV detection:26 of 48 (54.17%)
Threat level:   2/5
Spamhaus Hash Blocklist :Suspicious file
Hatching Triage Score:   10/10
Malware Family:agenttesla
Link: https://tria.ge/reports/200630-45skfmxwzn/
Tags:spyware persistence keylogger trojan stealer family:agenttesla
VirusTotal:Virustotal results 54.79%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Executable exe 6a22f447f1f33ab89c601e610999524ccb6d764361d3bdadaedd2c3b8d6b7184

(this sample)

Comments