MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2e9dfb5cf40b1fe1ca5561c0b425d958b676f794a7683e472a57e42c25782119. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2e9dfb5cf40b1fe1ca5561c0b425d958b676f794a7683e472a57e42c25782119
SHA3-384 hash: 10637678602323037ff917aea66dd791bb68f187d015c3c7778a6a66f5421ee80460a488e843a355e0d1ea03d8631851
SHA1 hash: fdc216ead16a34748505c820a3005754733e5ed2
MD5 hash: 0dfdc249b1052d92b735fba367f6f856
humanhash: beryllium-cup-beryllium-spaghetti
File name:DHL PO1001910.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:369'364 bytes
First seen:2020-12-09 07:47:21 UTC
Last seen:2020-12-09 10:44:40 UTC
File type: gz
MIME type:application/gzip
ssdeep 6144:yLHhJnTMgdH0Bv9sfWCd9jv6MsjRPisSQTz3nsnUpH08OjL41w1Gdmu+:yLPTxH0Bv9CdRvzwRPiyvsnFjs1WGUX
TLSH 7874237F87BE55C09110EA749D00BFA7A0A10F2ECA781AB45B72F21B9E4D1316DB91CD
Reporter lowmal3

Intelligence

File Origin
# of uploads :
2
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BackDoor.SpyBotNET.25.25353.4176.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2e9dfb5cf40b1fe1ca5561c0b425d958b676f794a7683e472a57e42c25782119/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=f2o7wxhubmp6dssvmhalijozlc3hn54uu5ud4rzkk7scyjlyeemq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/2e9dfb5cf40b1fe1ca5561c0b425d958b676f794a7683e472a57e42c25782119

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz 2e9dfb5cf40b1fe1ca5561c0b425d958b676f794a7683e472a57e42c25782119

(this sample)

AgentTesla

Executable exe f5a368e8e1fd840abbe075db0a30756ca6297af3c9d3a8f9e1998f57e1204cbd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f5a368e8e1fd840abbe075db0a30756ca6297af3c9d3a8f9e1998f57e1204cbd
  
Dropping
MD5 315993f7d191ebd0615faf3822ca249e

Comments