MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 86916d495785da1ba8cac144705352f4fad975064911ad02b14733f5253d70fa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 86916d495785da1ba8cac144705352f4fad975064911ad02b14733f5253d70fa
SHA3-384 hash: e1de20c08822bb0c2e7df910be82ecb28bc9a79f36f908226e9deb871e108fc0f729e75973dafb87d62319af44441eee
SHA1 hash: 3ca4e30a7a623cd89b8947139cb949684a3dfe86
MD5 hash: a1af6d75300bebeedc496016f8a12d8b
humanhash: cardinal-illinois-oregon-ohio
File name:DHL Shipment Notification (2).zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:459'552 bytes
First seen:2020-05-08 04:50:39 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:qTY7YGS/QPqVKDU3hGHPpVVaPfkyT8ax15RRlKWGl1:qT0aQPqoDU3hgx3aXkyZ5RbTq
TLSH 4DA42390A6D9C546E21624E3C3BEA7CC7AFC633F3CDF21E5E1D3A509506E86188BD524
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Ursu.862705.26744.15353.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-08 11:06:01 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
26 of 48 (54.17%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=q2iw2skxqxnbxkgkyfchau2s6t5ns5igjei22avri4z7kjj5od5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 86916d495785da1ba8cac144705352f4fad975064911ad02b14733f5253d70fa

(this sample)

AgentTesla

Executable exe dc6c0fad34c5e7721e2d03d9b97dcd619d88539a7cd7ef8b8a2d8eed0229ea23

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dc6c0fad34c5e7721e2d03d9b97dcd619d88539a7cd7ef8b8a2d8eed0229ea23
  
Dropping
MD5 eb85b978b2cbe325a0a0689678a001c4

Comments