MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0aaf8470f058393a170e770229d512d6aaa825cfed291edd6c8112fb2532e05a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0aaf8470f058393a170e770229d512d6aaa825cfed291edd6c8112fb2532e05a
SHA3-384 hash: 4678f617a21ed0ccc0e2d478a2e3719a06deafc14cf5f3e51c5e39dee49ccc2e5b66bcc579c685b620bf27ce164395d4
SHA1 hash: e4a3ec3c8854332f460e00a34f6a24cf79116220
MD5 hash: 550f44e0d9a1ce1174a1c1e10e6f34e1
humanhash: wyoming-glucose-violet-oven
File name:INQUIRY 20201021.PDF.Z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:679'121 bytes
First seen:2020-10-21 05:42:37 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:y3uRGs7ixG0rNm1pRH8DEewCybotwKYZIaa8H1zMUQ2JnFB3iRMoAVwrOZESAxzv:nGs7iE1vH88lbomKNU1svGmi2GI
TLSH 52E423DB91B094BA32648E14910BB64F6CD68EC35C0F48654CACAECDD96F30B398D9F5
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0aaf8470f058393a170e770229d512d6aaa825cfed291edd6c8112fb2532e05a/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-21 03:39:46 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=bkxyi4hqla4tufyoo4bctvis22vkqjop5uur5xlmqejpwjjs4bna._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 0aaf8470f058393a170e770229d512d6aaa825cfed291edd6c8112fb2532e05a

(this sample)

AgentTesla

Executable exe b3a2d81e42fb9e1f8aac6d6c7b77e6f125ab58d460cab6a8e60c395e45b5c8f5

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b3a2d81e42fb9e1f8aac6d6c7b77e6f125ab58d460cab6a8e60c395e45b5c8f5
  
Dropping
MD5 33ce4768880c88f6d801ee583e83ac32

Comments