MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 188a4bbc4101df2393adfe6a7e544ce28929941f2ec6270ca1f4e61dfc32ec50. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 188a4bbc4101df2393adfe6a7e544ce28929941f2ec6270ca1f4e61dfc32ec50
SHA3-384 hash: 760bbe4aa9bc01773009be2e9eec2340146a32d2b17f3c5c87e2419c8f199d204003373bcf52ee503b8bfdfc77468248
SHA1 hash: b3f146713390fbb4478b518d8896ca84d56595df
MD5 hash: fe8c8588ab78ee15d1921b056df50f07
humanhash: tango-cup-uranus-tennis
File name:MV. DARANEE NAREE.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:479'857 bytes
First seen:2020-05-06 06:23:42 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:fJ/7OynzvPMHWJbvoouDonTG+xDo7NFNw5:fJqynXJbvH9GNw5
TLSH ACA4232AE877B74938E60F3C4CDDDEFB2213EE610ED1669CE85D9420AFD6097C512891
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-05-06 06:35:27 UTC
File Type:
Binary (Archive)
Extracted files:
22
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=dcfexpcbahpshe5n7zvh4vcm4kestfa7f3dcodfb6ttb37bs5ria._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

Executable exe ff0b6df1ebbe0c832da7869563f4ffd729fdc190e620347ac93b5d2cf31896ae

AgentTesla

rar 188a4bbc4101df2393adfe6a7e544ce28929941f2ec6270ca1f4e61dfc32ec50

(this sample)

  
Dropped by
MD5 faccc453881fd12741db76c5c36cb75e
  
Dropped by
SHA256 ff0b6df1ebbe0c832da7869563f4ffd729fdc190e620347ac93b5d2cf31896ae
  
Delivery method
Distributed via e-mail attachment

Comments