MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf39dc0e4727bfd3a0bf5bdb7909f91027dac2a1c80267838ec1d9b650b567bb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: cf39dc0e4727bfd3a0bf5bdb7909f91027dac2a1c80267838ec1d9b650b567bb
SHA3-384 hash: 59e94bda78f207f8e5bf42b96fc25fd8218ab41ce3aac3da717a0198a18c3819ce288dbd8919375beaeceb93d559a2a4
SHA1 hash: a0a2e2c17fceb3237dc59679fed34c7aded5406d
MD5 hash: 2c0455ca8df3b913f3a6154a2e6da1fa
humanhash: cola-apart-pizza-bluebird
File name:MV.CS FLOURISH.rar
Download: download sample
Signature AgentTesla
File size:418'449 bytes
First seen:2020-06-01 11:47:46 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:ry37hX8MfZ5vu1Nyw9825sJOISDbbFmS0IAJ:rAhX15vENyw982Y9UxmSDAJ
TLSH F1942300969A9DBCB8B0F8C9835C5F45210CBFAF46B4C15D6B7099E21DE11D9A8FCA0F
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Status:
Malicious
First seen:
2020-06-01 12:35:48 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar cf39dc0e4727bfd3a0bf5bdb7909f91027dac2a1c80267838ec1d9b650b567bb

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments