MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c75238a94de4140f504f0db885a1feb6d3232b8fb14912167bf0607f40fc15f6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: c75238a94de4140f504f0db885a1feb6d3232b8fb14912167bf0607f40fc15f6
SHA3-384 hash: bb3b4eace400e05d7d36430c92f1d2a95dc04fd010b6396b2cea695fc7bc012900b124dac56eb7b79aacc930cfb80899
SHA1 hash: 6458e394ae677a8f27db517eab4e4790834d243b
MD5 hash: bb9803c8fc6619a94fa86deba1af73f1
humanhash: queen-single-oscar-snake
File name:Quote Items.rar
Download: download sample
Signature AgentTesla
File size:381'453 bytes
First seen:2020-06-16 22:38:29 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:0h31wNu4WwaTVItpK//HvVPG+OFCbfMEJT+FZcDDIaUrXcDCXv/5JRNxmIywDkyR:4lf4kVItpgfvVPGDEbflPA7r1XvRJomV
TLSH 3C8423D9515156FA612E19C906F41FB6E0B63FC99C8B4F0FE217A0850BD2CE386E9F90
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-06-16 15:21:52 UTC
AV detection:
23 of 31 (74.19%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar c75238a94de4140f504f0db885a1feb6d3232b8fb14912167bf0607f40fc15f6

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments