MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7876bc424b2de8347d43b214fe69ca2e61c68bb601fbaf0fbe43abadab495528. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7876bc424b2de8347d43b214fe69ca2e61c68bb601fbaf0fbe43abadab495528
SHA3-384 hash: 0076b7b691918be8be129462cbf79e3062d4b295e179187fa8281a9d72110376e1b55d01b1d8abcd1cf0e62ecaaae2a8
SHA1 hash: b77285d91968ea91f57bb5ce689bfd4b6ff552d9
MD5 hash: 39ad74b523d06c06bb106596a365faa5
humanhash: florida-venus-saturn-indigo
File name:200004396.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:373'548 bytes
First seen:2020-06-30 06:45:49 UTC
Last seen:2020-06-30 08:36:57 UTC
File type: gz
MIME type:application/x-rar
ssdeep 6144:FR8wNzKQ4UpCAGs7DlNhzkyWaoEzQ6sDfbWQ4HIYinmXj0/B9opis:FR8CzKQ4AdLrWaoEFsrbz4HSnmXj0pId
TLSH 6A8423A25498CDBCE2D0013F5D7E06A5BD9572EA9B34F003EAE56DE40BD9AD71E2C0C0
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7876bc424b2de8347d43b214fe69ca2e61c68bb601fbaf0fbe43abadab495528/
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Create hunting rule
Status:
Malicious
First seen:
2020-06-30 06:47:03 UTC
File Type:
Binary (Archive)
Extracted files:
15
AV detection:
17 of 31 (54.84%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=pb3lyqslfxudi7kdwikp42okfzq4nc5wah526d56iov23k2jkuua._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 7876bc424b2de8347d43b214fe69ca2e61c68bb601fbaf0fbe43abadab495528

(this sample)

AgentTesla

Executable exe 7ac2dee76520e25a21918a6ee79eedaf1a9de51aaee643d21d9cf6346451555e

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7ac2dee76520e25a21918a6ee79eedaf1a9de51aaee643d21d9cf6346451555e
  
Dropping
MD5 7e90e5f5106e876f9f080b224cbc069d

Comments