MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8852ef5f64e170ac8001307b4769dd95492882e20833518de2608016d1404677. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8852ef5f64e170ac8001307b4769dd95492882e20833518de2608016d1404677
SHA3-384 hash: f8160bcb53789f973f961fa8ced34eff0360b05ea7a5a2e82fe00881bbf04f7ac7fa539053f24f13276d82336e872ab8
SHA1 hash: 9ad681e81bf4456fb3fb8d07c14494e32fff22dc
MD5 hash: 1edf24302259b147d2adc66d56a4f397
humanhash: diet-paris-undress-purple
File name:DHL Express (2020-06-27) pdf.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:393'234 bytes
First seen:2020-06-29 05:37:38 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:k2sw4uDDjz91rEQszE8gpA/p6i06jMaTnz9uH5Az9UBVs27XUmUK:kLxuD3z91rEbzIAgNsVTnZuZASBLH
TLSH 6384233768F52877581348D785AA51AACFF618C5CA8C0AF1ECB59F8161D17E3E0732AC
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27342.RarHeur.v5.HideExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8852ef5f64e170ac8001307b4769dd95492882e20833518de2608016d1404677/
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 05:39:04 UTC
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rbjo6x3e4fykzaabgb5uo2o5svesraxcbazvddpcmcabnukaiz3q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 8852ef5f64e170ac8001307b4769dd95492882e20833518de2608016d1404677

(this sample)

AgentTesla

Executable exe 659d74d6d42fd86eb5ea79e7b74beb59c537da023e1290629cef1251704198cb

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 659d74d6d42fd86eb5ea79e7b74beb59c537da023e1290629cef1251704198cb
  
Dropping
MD5 c621c14831f9e603b0fc6adf5a3e67a4

Comments