MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8900ddd0ab1e31a3e6ecc8c1c70ea5e325973e63b4ba3f2ec562c20497ec249a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8900ddd0ab1e31a3e6ecc8c1c70ea5e325973e63b4ba3f2ec562c20497ec249a
SHA3-384 hash: 13c0e47e51d0e9963beefd2f7e314b52e146dce884d18a5eaa6e070f0b6b9a62c3d13a60bb97d8fe4c94f2025ee4255c
SHA1 hash: afaa04aa8ac398689678850a1482cb0f089d95a2
MD5 hash: 4bbeb410e858d59c4237e60c006fd0c9
humanhash: oklahoma-mirror-virginia-one
File name:tt copy.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:373'501 bytes
First seen:2020-07-13 08:12:26 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:ydwd6Zu73ZEE0fFIBeWgdqmaedhrljSodAOchw1g9Ieg1/VOGDT3EDzGvFjenH2M:yGdIujlcFIIWg0mZjStO3gNgNDT3EDzt
TLSH 2384237B053F4246CEEFFC343370DDE08B252E96EB291C9A470746A80B5538B72A9E55
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Inject3.44603.25400.1867.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8900ddd0ab1e31a3e6ecc8c1c70ea5e325973e63b4ba3f2ec562c20497ec249a/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-13 08:14:05 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 8900ddd0ab1e31a3e6ecc8c1c70ea5e325973e63b4ba3f2ec562c20497ec249a

(this sample)

AgentTesla

Executable exe e016bfbd170c4b15789abf7fa2ba30bec2bd785e2ec9b9fc759722833ed88a87

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e016bfbd170c4b15789abf7fa2ba30bec2bd785e2ec9b9fc759722833ed88a87
  
Dropping
MD5 3a1635fd14ff9c17c0f65b8c393b9739

Comments