MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d709aab9b049d7b936c554f5a1d640af0ce17e3ae3fdd7323cfa286718d609e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d709aab9b049d7b936c554f5a1d640af0ce17e3ae3fdd7323cfa286718d609e4
SHA3-384 hash: 080dd7d4ae56601e94d83525717c4341ed7ab0820f1b73328ad21b4233a3737cd0b66881c3adc2c4a42e3e392365f34c
SHA1 hash: 5fdc8b365e408155a10533c5937bec77f2a208a4
MD5 hash: 7cffb5b96c7700c96356126f9650e764
humanhash: harry-skylark-gee-oxygen
File name:Order and Specification Data Sheet.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:511'894 bytes
First seen:2020-05-02 06:37:03 UTC
Last seen:2020-05-02 09:19:18 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:yaZv8P2CN9pKDkFM2PlxHk0S3xyRbJoqp:yaZEpNvEkFR99KyRbNp
TLSH C2B433AC57D4ADF3F5DB8AA9C08D08D9AFB7124F64148034286BA5FC93D40E6F1B5067
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
4
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BehavesLike.Win32.Generic.jc.27987.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22205.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-05-01 23:57:58 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
24 of 48 (50.00%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=24e2vonqjhl3snwfkt22dvsav4goc7r24p65omr47iugoggwbhsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

AgentTesla

zip d709aab9b049d7b936c554f5a1d640af0ce17e3ae3fdd7323cfa286718d609e4

(this sample)

AgentTesla

Executable exe 723497bec220b3ef0d45c5134403fd2ba23eef0673707cf1e74166b06365d308

  
Dropping
SHA256 723497bec220b3ef0d45c5134403fd2ba23eef0673707cf1e74166b06365d308
  
Dropping
MD5 26b9a6cee367f28b277d48ade4e64a7a

Comments