MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 02cb1ef905c2350c7a95abc21de6cd41798581dea839dd5c02f2d2f274aec268. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | 02cb1ef905c2350c7a95abc21de6cd41798581dea839dd5c02f2d2f274aec268 |
|---|---|
| SHA3-384 hash: | 9e31c7a7ed2b6bfe3761629d03f0fdb22ed7a925474509f6e46d5d5cdb9f6e52e9eb61bc90e62c8ba6b78b5021e26e1c |
| SHA1 hash: | 129604c77078fda585fce8d9dd2ddcec24bc74be |
| MD5 hash: | de5774ebbbc86c9076ccce5343ea7cb7 |
| humanhash: | spaghetti-washington-princess-nuts |
| File name: | de5774ebbbc86c9076ccce5343ea7cb7.exe |
| Download: | download sample |
| File size: | 332'709 bytes |
| First seen: | 2022-02-24 08:57:40 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| ssdeep | 6144:AUUwoO1hFPLd5K777777777777G7cF9cUEYhaDCjd4EWD:UO1hN3K777777777777G7cF9ciUDed4L |
| TLSH | T1F0641A543DA75F3DF1B18B724DC5ECB4BA98FB231C08B37D78556646C6A1B8088432BA |
| Reporter |  abuse_ch |
| Tags: | exe RAT |
Intelligence
File Origin
# of uploads :
1
# of downloads :
202
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Detection(s):
Result
Verdict:
Malware
Maliciousness:
Verdict:
Likely Malicious
Threat level:
7.5/10
Confidence:
100%
Tags:
control.exe obfuscated overlay replace.exe
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Agent Tesla
Verdict:
Malicious
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
52 / 100
Signature
.NET source code contains potential unpacker
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2022-02-24 08:58:14 UTC
File Type:
PE (.Net Exe)
Extracted files:
13
AV detection:
13 of 28 (46.43%)
Threat level:
5/5
Unpacked files
SH256 hash:
02cb1ef905c2350c7a95abc21de6cd41798581dea839dd5c02f2d2f274aec268
MD5 hash:
de5774ebbbc86c9076ccce5343ea7cb7
SHA1 hash:
129604c77078fda585fce8d9dd2ddcec24bc74be
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 02cb1ef905c2350c7a95abc21de6cd41798581dea839dd5c02f2d2f274aec268
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.