MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a6c02f2acd8af8b895519d6e064c950d47d33770a539484353d129fa555fda43. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a6c02f2acd8af8b895519d6e064c950d47d33770a539484353d129fa555fda43
SHA3-384 hash: 87192117cd907c6c2b0eafd3e133989af802de9fc23a50b5b3395e9a0224c229d9b3c2dd5e248dfb514a0fe6e927cbb5
SHA1 hash: 2c72c3bc534e9e0625a2aef1be5df580a7568e39
MD5 hash: 755ea4bd5dfc0aa056c8f69648ff8f32
humanhash: indigo-uncle-fillet-seven
File name:Technical Details.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:363'357 bytes
First seen:2020-07-03 07:17:23 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:HirEwx0eS1Xs8+zpvE/92u//+IFkJ9B6jZuwuoQMiG3V56u5uoND+8DpeIGdeZYG:Cwk0eSe1O92W+IFkN6jHOMiM2ZoNDpFF
TLSH C774235DCE3B6E4BC94A148F9CD00AC6F0AE4CB671938178E2843E166FA84F654B7C61
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic-EXE.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a6c02f2acd8af8b895519d6e064c950d47d33770a539484353d129fa555fda43/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 07:19:03 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=u3ac6kwnrl4lrfkrtvxamtevbvd5gn3quu4uqq2t2eu7uvk73jbq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip a6c02f2acd8af8b895519d6e064c950d47d33770a539484353d129fa555fda43

(this sample)

AgentTesla

Executable exe 9bf584f64af278fb0a7afd8aa15c460e19e3263388bc896284712c7a07426eeb

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9bf584f64af278fb0a7afd8aa15c460e19e3263388bc896284712c7a07426eeb
  
Dropping
MD5 f45b90ee156fcebbc41ee694e8714141

Comments