MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 83559fef336897e239f90785ce581d276a7f7bbd05e8e56aa077e03770c93b12. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 83559fef336897e239f90785ce581d276a7f7bbd05e8e56aa077e03770c93b12
SHA3-384 hash: c6b3fdb3b535276636918d58fbc81653572f06b1d90a5e1d3879a72fb47ca57248534f20b60faae192f02d1ad9aba96d
SHA1 hash: 71d0b2eff265d59fee41c8a4832be7f1bff6b786
MD5 hash: b1654a316e2e2f2c3e3c461959367c8e
humanhash: mexico-video-pluto-mockingbird
File name:SHIPPING DOCUMENTS.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:379'442 bytes
First seen:2020-07-03 17:46:45 UTC
Last seen:2020-07-04 04:50:06 UTC
File type: z
MIME type:application/x-rar
ssdeep 6144:tkgk5lENDjWzbEGhm9R0osFVd5SpCS8/ggCMyNvJQQqgtzrVqS3v6MLGBjoseA3u:tkj5lENW/EcOOo8jYJCvWBFq8rkYfaBu
TLSH DA8423EB0B9A3EA11BC23460BE56524CF109FB357D1572441D84F3AD88A4387DBA786F
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/83559fef336897e239f90785ce581d276a7f7bbd05e8e56aa077e03770c93b12/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 17:48:06 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qnkz73ztncl6eopza6c44wa5e5vh6655axuok2vao7qdo4gjhmja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 83559fef336897e239f90785ce581d276a7f7bbd05e8e56aa077e03770c93b12

(this sample)

AgentTesla

Executable exe 7f41f48a7e8e4e0e5a1a718cee1e04a2eed7600bca5f44f87221b82ee0ce6aa8

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7f41f48a7e8e4e0e5a1a718cee1e04a2eed7600bca5f44f87221b82ee0ce6aa8
  
Dropping
MD5 8fdb51406e20a16f4e4331e4f140f5a5

Comments