MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2c69ac977b2e0ae5047b968fd302eb6db889c3fa183b92afc3fc45eceeb94900. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2c69ac977b2e0ae5047b968fd302eb6db889c3fa183b92afc3fc45eceeb94900
SHA3-384 hash: 66f9b4fcc40a819649fed06d5be7d905969e3548692fe1aacd33a29cdeea668d921c595c19c9dedec32d26580b87f2c7
SHA1 hash: f152e419598d55290c2d1212278eb670eb9d7650
MD5 hash: f948e57da819792f08d8629b69145c46
humanhash: shade-delaware-black-mexico
File name:NewRevPI2020-4.pdf.arj
Download: download sample
Signature AgentTesla
Create hunting rule
File size:383'313 bytes
First seen:2020-06-23 06:57:38 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:59YFTQRHg7zJnSjqxd06/vYl94/taiRyXr5y7XHh+KlePRLrBakr95XJu:59TRHg7zJSjqxd0QYc/fyXfWqHMw55u
TLSH E684233B58A1F57BE4C6C9FFA7816BEDD540BB4A4F825F7387098C9281212CB1538972
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PWS.Siggen2.51012.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2c69ac977b2e0ae5047b968fd302eb6db889c3fa183b92afc3fc45eceeb94900/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 06:59:03 UTC
AV detection:
5 of 48 (10.42%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=fru2zf33fyfokbd3s2h5gaxlnw4itq72da5zfl6d7rc6z3vzjeaa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 2c69ac977b2e0ae5047b968fd302eb6db889c3fa183b92afc3fc45eceeb94900

(this sample)

AgentTesla

Executable exe fb6468c1b5d52fefa22e4a5b9bf5ad65dcab6696e3b3bfd19947ecaa318a5ad5

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fb6468c1b5d52fefa22e4a5b9bf5ad65dcab6696e3b3bfd19947ecaa318a5ad5
  
Dropping
MD5 a94bb2429589b22a051567335749e089

Comments