MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 960f9740e6d07a60af573fb3e38c87a519f055b00c8ba4986967dd7f3545e192. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 960f9740e6d07a60af573fb3e38c87a519f055b00c8ba4986967dd7f3545e192
SHA3-384 hash: 6e3420a451374b2828e70e54f48e5cf0c7221ae87a8f2d55f3b50b2a14081668e330d5e2e0d8caa10c7d64ae3f134240
SHA1 hash: 6fef782b0289dbce98cee624c35ef01a5a6e0bcd
MD5 hash: c19bc8765208a8710382686fb4361bc3
humanhash: illinois-echo-quiet-pip
File name:RFQ 33000037823.rar
Download: download sample
Signature AgentTesla
File size:1'458'508 bytes
First seen:2020-04-14 13:45:58 UTC
Last seen:2020-04-14 14:11:31 UTC
File type: rar
MIME type:application/x-rar
ssdeep 24576:CdRfle8VDMGlfw/KSWTSS7B2gd1Peeec9kBXaw+1csxHpolx58+9vKiJlb3s:CdNle6/trDBfreeNkBKw+LpYx5gO3s
TLSH A86533405BA327A54C9F76CDEAEEA585B056B386401A08DD743DC0935C86CF8B3DEBD2
Reporter cocaman
Tags:AgentTesla rar

Intelligence


File Origin
# of uploads :
2
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-04-14 14:35:40 UTC
File Type:
Binary (Archive)
Extracted files:
21
AV detection:
16 of 31 (51.61%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 960f9740e6d07a60af573fb3e38c87a519f055b00c8ba4986967dd7f3545e192

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments