MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b9b0d8a817f3ee9298fcdf13e1de201c0f0e415bb4a9667a244baba7386a72b3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b9b0d8a817f3ee9298fcdf13e1de201c0f0e415bb4a9667a244baba7386a72b3
SHA3-384 hash: 0682c856cab931bb5c26bc3b1d827ff68ae3d4861bf5ed92823ee93d0b53da6f8873690ea3d37fc8d5f2beb4adc498f4
SHA1 hash: 4bc9c3f9f4c6d8e350c59a0d52ed5c5227f3f77e
MD5 hash: 729317f3c86c5b00ef0f48e90eeb1380
humanhash: triple-papa-bravo-virginia
File name:PO 48290.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:360'374 bytes
First seen:2020-06-29 04:51:50 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:QifPc2k4MA7Q6qBBpiK3yX7DImMvLCvVGkAV+2whZIjhWxL631gnvurdpYYghreP:QYXk4vQ6s7NuiCvs/w8sogvu3YYg5p4
TLSH DE7423CA4D94CEA5891173DB4D77EC9F5718815BFFE837A664722A6330784CB321B04A
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b9b0d8a817f3ee9298fcdf13e1de201c0f0e415bb4a9667a244baba7386a72b3/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 04:53:04 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xgynrkax6pxjfgh434j6dxradqhq4qk3wsuwm6rejov2oodkokzq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar b9b0d8a817f3ee9298fcdf13e1de201c0f0e415bb4a9667a244baba7386a72b3

(this sample)

AgentTesla

Executable exe dffe7fe7b287e18288291cd5060a9f8a87c92e91bbed5a41a28f7c3914db73d4

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dffe7fe7b287e18288291cd5060a9f8a87c92e91bbed5a41a28f7c3914db73d4
  
Dropping
MD5 ed774675d6983dfe1611f058637b22d6

Comments