MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 e25cf39211b066ece336c6ed968b4040c20bf270a737e7f5605be2a7b0de99e0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 2
| SHA256 hash: | e25cf39211b066ece336c6ed968b4040c20bf270a737e7f5605be2a7b0de99e0 |
|---|---|
| SHA3-384 hash: | 0fe5c6850ba70859bbe9d30b9c71fe6bd8ba94bbbb77f5493dbd591854b10f6d26e9c001430b66e40eaeb86ddaa8790f |
| SHA1 hash: | 7c955e3eed14fc00053dff319606e1ae4f88eb3e |
| MD5 hash: | 3878d7575b50d4d567eeda69b0fa14a7 |
| humanhash: | white-twenty-sixteen-jersey |
| File name: | DHL SHIPMENT NOTIFICATION_PDF.gz |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 404'390 bytes |
| First seen: | 2020-05-25 05:11:39 UTC |
| Last seen: | Never |
| File type: | gz |
| MIME type: | application/x-rar |
| ssdeep | 6144:YyFhI7zg2gcOXq0/XYo8dqEIkzhTS9YmSPGIbfAl74Hp8CvA2KrWrV+5c6Rh:YN9LOa0/B8dJT4Yfh2YPrVsRh |
| TLSH | 6084233528B7893BDB0B378B0046259F91D1E963D04B7998B63E07BD26203719EDB17D |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Grp
Status:
Malicious
First seen:
2020-05-25 05:36:04 UTC
File Type:
Binary (Archive)
Extracted files:
13
AV detection:
25 of 48 (52.08%)
Threat level:
2/5
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.