MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 02c75b085d1821790cccb4374d1855bba3bc80b68799fa539e028b99fe7d9157. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 02c75b085d1821790cccb4374d1855bba3bc80b68799fa539e028b99fe7d9157 |
|---|---|
| SHA3-384 hash: | 7d8d473f03b0887350d70a62ec315688fbf4c8974107493ca432baa18e73a7bb65443f16b94a429db7758942d5abf5af |
| SHA1 hash: | b22296a413186d2cbc5bbf1b18d4d353a4a5fdd9 |
| MD5 hash: | ac3a9dd21197d5b2085ce890f05af128 |
| humanhash: | minnesota-wisconsin-north-snake |
| File name: | Payment Copy_pdf.img |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 1'376'256 bytes |
| First seen: | 2020-04-07 11:49:43 UTC |
| Last seen: | Never |
| File type: | img |
| MIME type: | application/x-iso9660-image |
| ssdeep | 12288:FL100mNh/1UFagXmo4Ri8FqbvN12HAKuj/3kOWD2:zFaymPRi8FyN1OAKs/yD |
| TLSH | F855BEC4EE87E909C16812F4D98ED20CC224EF096B95DE523A4DF3592A7221DCCED6F5 |
| Reporter |  cocaman |
| Tags: | AgentTesla img |
Intelligence
File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-04-07 12:35:57 UTC
File Type:
Binary (Archive)
AV detection:
16 of 30 (53.33%)
Threat level:
2/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.