MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49
SHA3-384 hash: f18d4bd3fd47cfe2e5e39f36373a73aee4c384f284250b2f93391531537ec936b02e463e42e5a065e711d377636ca408
SHA1 hash: fa041d3ec576b1b61dccebcc2c02d3bb1cad78cd
MD5 hash: 41e0a98da8a82aae32787bbf2b2f72c7
humanhash: idaho-winter-alanine-hawaii
File name:FT20178L5354.rar
Download: download sample
Signature AgentTesla
File size:377'424 bytes
First seen:2020-06-30 12:38:50 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:pXL0a7ixROD8kh/DxsmOlr93KzTmpfHUYmE/dKQoe91ZYjaVX7rtXkqFPdLcwv:p17F8khtsL5R0mpfHUYmE/dMU1ZYeVr1
TLSH 1284235095BB04A9EF33D5EB08AECFCDF945C68C9570725036B197C4AC1E9A7D0287E2
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Ransomware.TeslaCrypt
Status:
Malicious
First seen:
2020-06-30 12:40:06 UTC
AV detection:
13 of 28 (46.43%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments