MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3016bd40a3d1750554def776bf94db479a9a8a0e2a437f4a00af671d9e1c828f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3016bd40a3d1750554def776bf94db479a9a8a0e2a437f4a00af671d9e1c828f
SHA3-384 hash: 62cc1a3d5ae901cbcda0a29c3e43e696986b015f13fa44dae0cf6f3a137b0d1c1dc13047a63c5578468790e86b63cb2d
SHA1 hash: 41bc7d6719f63f76131933a1aedf71fd02b3b1a1
MD5 hash: 4d9ff7e79055851e2fe9c47e615a9a72
humanhash: tango-romeo-table-harry
File name:MV ULTRA TBN.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:503'091 bytes
First seen:2020-06-29 03:28:43 UTC
Last seen:2020-06-29 03:34:46 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:L/RfMR1mrfydjDOiRnmYdUMRuwLC0pMaj2ge8pU5QP4cDOOWPUUMihpBdZKCYQxI:LRfqmby5iYkMg/imgeyfO3cUrp4GD2Xn
TLSH 18B4233B99171099518B5C1BB3E32533A0CE2046A03F5E35D433EF6ED66F9F8A016E59
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3016bd40a3d1750554def776bf94db479a9a8a0e2a437f4a00af671d9e1c828f/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 03:30:06 UTC
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gall2qfd2f2qkvg6653l7fg3i6njvcqofjbx6sqav5tr3hq4qkhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 3016bd40a3d1750554def776bf94db479a9a8a0e2a437f4a00af671d9e1c828f

(this sample)

AgentTesla

Executable exe 28c522239124483bcc83ca08cd0cbb3af1a9a3e18a1d8648e958c153c8e9e110

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 28c522239124483bcc83ca08cd0cbb3af1a9a3e18a1d8648e958c153c8e9e110
  
Dropping
MD5 2a39d9260dcb26bd8f05084f8fc2b2cc

Comments