MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d39dbdcd96eae56309c5eda84aa21589a479c427c2d65fc8e716cee064b9d3ce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: d39dbdcd96eae56309c5eda84aa21589a479c427c2d65fc8e716cee064b9d3ce
SHA3-384 hash: 8bbad287131e0acb939fc91538f604056fc56ff4703a6b92a165f90c51c376f12f025f1f8b33645d28286260948a9578
SHA1 hash: 15cb8971722266a7e477541167b29af6d806d673
MD5 hash: 634680b21ad6c9f6bdb8bca880ae5352
humanhash: shade-yellow-rugby-carbon
File name:Bank Slip copy.pdf.rar
Download: download sample
Signature AgentTesla
File size:430'755 bytes
First seen:2020-06-12 09:12:42 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:xxfPU2HACwDTkk8IvWNY3MvXsowdir3ef8:TvgjDYkTvWS3kuy3a8
TLSH 409423FEBC0FE6F04D469F6FEE4B849282C2FBE009957C1EE0D25495C9ABCA54510272
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Status:
Malicious
First seen:
2020-06-12 09:14:07 UTC
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar d39dbdcd96eae56309c5eda84aa21589a479c427c2d65fc8e716cee064b9d3ce

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments