MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 316606cbb1f6f4c2b7bf7effc53e6fb102c64aec1ff11190123b43a22394444f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 316606cbb1f6f4c2b7bf7effc53e6fb102c64aec1ff11190123b43a22394444f
SHA3-384 hash: de2bc69421de7ebe43a051f71998fddc3b63fd0db1319cfbbcc01ea546f77a7370d1a01fd3c2a4acd6c68c353750be16
SHA1 hash: 3834e8a3c01dcaa853e733a00b6196d8cab67192
MD5 hash: 9dc3c713940e2ae46a7c62a06000daa8
humanhash: venus-paris-august-lactose
File name:WAA-GLOBAL-AGREEMENT-2021.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:524'000 bytes
First seen:2021-02-18 00:00:41 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:Cw6N9iLPcoM7spA2vZZJbnPP7Q46VMb684Kl8rfEp1Dme1czHc6y:CbaalWfbnsTM2Lg8rfcSz86y
TLSH C3B423F89AD34626E63474CD4EFA5C705A6F05891BC4CD86001A6FBB217FF2718CAD88
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Packed2.42845.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/316606cbb1f6f4c2b7bf7effc53e6fb102c64aec1ff11190123b43a22394444f/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-02-17 01:25:23 UTC
AV detection:
12 of 29 (41.38%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=gftans5r632mfn57p374kptpwebmmsxmd7yrdeashnb2ei4uirhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 316606cbb1f6f4c2b7bf7effc53e6fb102c64aec1ff11190123b43a22394444f

(this sample)

AgentTesla

Executable exe 881949b6fe7bf8123401a6bbcffbfa52a8ef174577db6e445b193ee7bbcbd5f6

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 881949b6fe7bf8123401a6bbcffbfa52a8ef174577db6e445b193ee7bbcbd5f6
  
Dropping
MD5 97ac57df6ab2dc10f744924540d6f192

Comments