MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 90e886bb960b701ac7ca2f0e61a6191e23bd783074f49d7ab96ced3146309ced. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 4
| SHA256 hash: | 90e886bb960b701ac7ca2f0e61a6191e23bd783074f49d7ab96ced3146309ced |
|---|---|
| SHA3-384 hash: | 4ac0171acf08c66a2c736a615826d5defdc61777b782cf72cd6c221e6cb229592f59b9c37031cb9915520783fedc5256 |
| SHA1 hash: | 8955a911f250d2932168118a27e242b8f32da68e |
| MD5 hash: | 07ae78baa29fb0bab719bc0d2048b71d |
| humanhash: | potato-vermont-pluto-autumn |
| File name: | PACKING LIST.gz |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 649'732 bytes |
| First seen: | 2020-07-18 18:47:06 UTC |
| Last seen: | Never |
| File type: | gz |
| MIME type: | application/x-rar |
| ssdeep | 12288:q0DxZYojXo8wpBmUeqIrkKU3QVbr0L4qwYlMXt817F6deK:7Ioj48wpBmUetkrQVn6aXte7F0/ |
| TLSH | B5D433933CD349C5A21C5811509B91E28E9BC2D3ACCE435CF3D66B8E864622E7A1D7DF |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Status:
Malicious
First seen:
2020-07-17 02:17:00 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
2/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
AgentTesla
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.