MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f6faa955942d4af73fb7d870d4918ef7fcea65fd1ad4b22a669923d3c2461352. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f6faa955942d4af73fb7d870d4918ef7fcea65fd1ad4b22a669923d3c2461352
SHA3-384 hash: 6881691ad63934094cf4296a4e44f4b06732f680f10bbdea2675c1f9710578f8919b975ae6dd242488dddfba6df88a4d
SHA1 hash: 48c92fdfad70bac68a4284baabe81cf740b41f3e
MD5 hash: a7474e8ffe016672da6df7061f2da278
humanhash: white-burger-table-skylark
File name:long overdue statement (4).zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:536'993 bytes
First seen:2020-06-26 16:39:39 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:ysfwSxqxyRgRKTaUTKWA9tFlgLeL4FP0RBMCX/f2AlG/n6g6:ysfwSAMRgREjTKW+tFWeL4FPcMCXmAlJ
TLSH EFB4231BD6AFCDA894A751263B6D2C421E7DDB270FC9DC08264F035B86B09774BD292C
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.FileRepMalware.21253.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f6faa955942d4af73fb7d870d4918ef7fcea65fd1ad4b22a669923d3c2461352/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-26 12:09:45 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=635ksvmufvfpop5x3bynjemo676ouzp5dlklektgter5hqsgcnja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip f6faa955942d4af73fb7d870d4918ef7fcea65fd1ad4b22a669923d3c2461352

(this sample)

AgentTesla

Executable exe 09e9c9443761511543691282dd163f837f822a4ad81e11d94518433bf790acd7

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 09e9c9443761511543691282dd163f837f822a4ad81e11d94518433bf790acd7
  
Dropping
MD5 6c416d02a9b78bf884234fc3c56e271b

Comments