MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 01a447a8637e58f7c91f10fc6a63d2542b3f877ab083c196725bcccea8e3953f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 01a447a8637e58f7c91f10fc6a63d2542b3f877ab083c196725bcccea8e3953f |
|---|---|
| SHA3-384 hash: | 08d7163f1f093248be7230dabdfa8781d48491789806d192eb9767119cb52bb23ae40e9af1530821e41fe45afe9c933f |
| SHA1 hash: | e6822f96b4739b15e52bc55b87e22a8b7d48c7f0 |
| MD5 hash: | 6664d36279f8da7bea43a0439c174a58 |
| humanhash: | wisconsin-quebec-mississippi-skylark |
| File name: | PI-378920.zip |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 525'288 bytes |
| First seen: | 2020-12-14 20:41:14 UTC |
| Last seen: | 2020-12-17 12:23:50 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 12288:cs1AMVUyKwxRyHrynRfXfgIdGRMiTAmkKvlQCO9WF2sdB/h16M:cs+zMw6RPgmGR1EnadOEFJ/h16M |
| TLSH | 4CB4232CE504536898D06D8A132F6DC6EFD446C8B1ABBCA400C4B17E6AEE9751CED3D7 |
| Reporter |  GovCERT_CH |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
8
# of downloads :
180
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.86
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
AgentTesla
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.