MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d
SHA3-384 hash: b83207aab1e7fb216638c7ed7a8ee5a6d8f15aef62c6e6855dc0b0dae2be1b75992e78937e4d5d3ce76037a658c044cd
SHA1 hash: 2de91a11a083b8d1dace17dc3951e67ea4044ab8
MD5 hash: f5ff7abf14a837ac10a388c514bbbcac
humanhash: eight-east-bakerloo-montana
File name:INVOICE copy.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:395'181 bytes
First seen:2020-06-30 10:13:36 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:fnuabOxd7wzwJ+KNGSTltW14AmuPgSrMrZo7TlbnFnb9676nrWplTMCtdyBovhki:2UqdcHkT0pPkWlTRVUt89o
TLSH 89842365FBDB434B4BBAFC00A4BA52610AFF60456A26ACFF8F04E9055CE4B551B73138
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d/
Threat name:
Win32.Trojan.DelfFareIt
Create hunting rule
Status:
Malicious
First seen:
2020-06-30 09:18:03 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=3nsknaeohqarcfd3u4tn3jky6zhltuunydualfbe76vppu7povoq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d

(this sample)

AgentTesla

Executable exe 3ebf463f9b7164a3e4ebcbac495f7fe23b2dbe7f18a7ebc2c0ee55fb4b651c83

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3ebf463f9b7164a3e4ebcbac495f7fe23b2dbe7f18a7ebc2c0ee55fb4b651c83
  
Dropping
MD5 5f6d5bc9d3eb49159c86ad34d9d56630

Comments