MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 98378154f85e59288dadca8307160f6e5cdc24b384a5a31822f36344778987c1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 98378154f85e59288dadca8307160f6e5cdc24b384a5a31822f36344778987c1
SHA3-384 hash: 96e9ce3d278bc6420a435a75e3614a5649ff6f39ebb6e8f11a3bb3752525b0ca53f316a1a2bfecf4f6dd139c2bbb9f9d
SHA1 hash: e404de1b622a7986105a78fce0c7e23d660b04e9
MD5 hash: 50613c6cc51a80836b2829450f5448ea
humanhash: pasta-bluebird-mississippi-foxtrot
File name:Documents-564687.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:404'881 bytes
First seen:2020-05-22 04:34:38 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:H1SKP34U2kRh3sLNP8ZTJC15KOqjmjrenJt2km9JqSSV:VSKPoqRh8Lc+5bqjmjreJEZoSi
TLSH 48842363661A9692087EC660E31933D3149131FE69E4B8701D18CEA73F3D19CFDEA176
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Siggen9.48419.7272.6444.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-22 01:07:38 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
26 of 48 (54.17%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 98378154f85e59288dadca8307160f6e5cdc24b384a5a31822f36344778987c1

(this sample)

AgentTesla

Executable exe 36a03b97c28620a2da908370d7505c714e9863bf3c328152e1a4a69fc40a54e4

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 36a03b97c28620a2da908370d7505c714e9863bf3c328152e1a4a69fc40a54e4
  
Dropping
MD5 6059ad5ce911e42a68593ac5d2445b1e

Comments