MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e171d2a30093717aa6d5afdf81092fea659b3b9eccbddbc51557f864114a930. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0e171d2a30093717aa6d5afdf81092fea659b3b9eccbddbc51557f864114a930
SHA3-384 hash: cfe4514cd55b5c0a6507188678ba44e83449e2ed4186e6e7446e9041b7d46095828a1fbb88de81ce5f2be43d4129cceb
SHA1 hash: ab4c6acf3d18376215f2625afff1399087d374f2
MD5 hash: 83d509e1ab19f37fcbff7951a7097ba4
humanhash: earth-two-princess-delaware
File name:TRANSFER REQUEST FORM (2).7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:530'039 bytes
First seen:2020-07-10 17:02:30 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:JCUsFjNoDKz0IBFqzU47sJ1854SsP5t6WLFlNZhT5MGjMnRbffXTRBmmWzz6AxUF:HRK24Kxs+OLhmGwRbf/Txsv7DbJUBsK
TLSH 03B423578CA0D993D4EDB87E1FC5CBF5E6E3F8001D8548AD28AA04A0F8DD5B48B59378
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0e171d2a30093717aa6d5afdf81092fea659b3b9eccbddbc51557f864114a930/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-10 12:49:23 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 0e171d2a30093717aa6d5afdf81092fea659b3b9eccbddbc51557f864114a930

(this sample)

AgentTesla

Executable exe a430a55dda341e88b1098cc062a7b768eebfe86161d2b7ec352cbe0d79a23b89

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a430a55dda341e88b1098cc062a7b768eebfe86161d2b7ec352cbe0d79a23b89
  
Dropping
MD5 43edcf3a8731848513d701d3237844e9

Comments