MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fee75eb74c3eab7141fd941ed8cdb6ab59bdedb872dbfd44189d849590c24c2b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: fee75eb74c3eab7141fd941ed8cdb6ab59bdedb872dbfd44189d849590c24c2b
SHA3-384 hash: e9da4aad50e9db85ce84d0875c9a2743bf764d0bfc35ac70c42f348ad6beade3c66aaff4c49d8adf63b0c5c44b7ba33f
SHA1 hash: ce96c51086791404d65d431dbc5153e581ed5465
MD5 hash: 6e06e0f63b7b43f3d44358fff57241d1
humanhash: hamper-emma-october-october
File name:Purchase-Order.pdf.z
Download: download sample
Signature AgentTesla
File size:393'704 bytes
First seen:2020-06-29 05:44:30 UTC
Last seen:2020-06-29 08:43:25 UTC
File type: z
MIME type:application/x-rar
ssdeep 6144:vbZc/D8hAJt9v5XU77LXEwWKSOGAfqhO08OccAEfdeOaDZFbI5uOG66:v9c/D8eF5XIfEw1fIO08FEyZa5U
TLSH A684239383CBB8C6EE40AF71BE55A16312E315351385330FAF6892B1C69C04FED69E95
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
2
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Status:
Malicious
First seen:
2020-06-29 05:46:05 UTC
File Type:
Binary (Archive)
Extracted files:
13
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z fee75eb74c3eab7141fd941ed8cdb6ab59bdedb872dbfd44189d849590c24c2b

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments