MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d21cb0ae0a759db1b6de9ad440a284665b9e544cab6b618893bbb35ae73e616a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d21cb0ae0a759db1b6de9ad440a284665b9e544cab6b618893bbb35ae73e616a
SHA3-384 hash: ca6f200f3a4a61b4b5ca5f41f9abf3f036fead8d794b3e74ec099fad2add40fb9f7336dc18da1127ae24fd45ab3ccb97
SHA1 hash: 8d5b6b4dc27f34291ab3a4c65bfa4a3a7fb0752a
MD5 hash: 1accf536820657e2efa03547e50a7284
humanhash: march-chicken-white-beer
File name:doc07486620200116112353 pdf.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:562'442 bytes
First seen:2020-06-30 21:11:50 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:D6IvnH0/tJbPk0NJHGTrwxr4w+//cS/pv7Xf0rCxsTt2JWNxWUfaqp3i:Djf0VVM0NNGxL//Px7v0rCxsxCqp3i
TLSH 5BC4239C3519125021B2A7F0454DBBFE2428F966F7BA0A445DB3C21EF634D9690FEF12
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27121.RarHeur.NoDP.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d21cb0ae0a759db1b6de9ad440a284665b9e544cab6b618893bbb35ae73e616a/
Threat name:
ByteCode-MSIL.Backdoor.NanoCore
Create hunting rule
Status:
Malicious
First seen:
2020-06-30 21:13:03 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2iolblqkowo3dnw6tlkebiuemznz4vcmvnvwdcetxozvvzz6mfva._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar d21cb0ae0a759db1b6de9ad440a284665b9e544cab6b618893bbb35ae73e616a

(this sample)

AgentTesla

Executable exe dfa098b2094107457d9bbe4511620001c72842c5c0240a3ab58989d5ebb49c97

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dfa098b2094107457d9bbe4511620001c72842c5c0240a3ab58989d5ebb49c97
  
Dropping
MD5 3c6eef45d23c93f32edaa81f6b7c8c54

Comments