MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 390eedca0cd4c3c6a1d25d637a3f24c20b10bfc20d77715e4969e1909154739e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 390eedca0cd4c3c6a1d25d637a3f24c20b10bfc20d77715e4969e1909154739e
SHA3-384 hash: 889c77aa49dd3ead1302fc4e0e03872e391c302ea5d4f3545ab3dad9d0bb63104c244f524966c1c0311b09eddc9229ea
SHA1 hash: 95abc7ffe982a05776ebf25c4c449468dfe3078e
MD5 hash: 7fc880ab14349f666f4012113b572ff5
humanhash: sodium-video-diet-lima
File name:2711579910.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'417'213 bytes
First seen:2020-03-14 06:39:28 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 24576:cGZI/gsZHiFfYB2+SHQjLbYcJ3JB3cEwsLJbfJxy+XRgAloZ5UcPuZvtUr0wL:cGO/BZHMQB2ojLRV3RtRxl4+7C
TLSH 85653327D58C39D8436AA8FFF2EAF3768B2AC74340FCD26F13166FB461141089995467
Reporter cocaman
Tags:AgentTesla delivery:attachment gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Bancteian
Create hunting rule
Status:
Malicious
First seen:
2020-03-14 06:33:12 UTC
File Type:
Binary (Archive)
Extracted files:
80
AV detection:
34 of 45 (75.56%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=heho3sqm2tb4nioslvrxupzeyifrbp6cbv3xcxsjnhqzbekuoopa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/390eedca0cd4c3c6a1d25d637a3f24c20b10bfc20d77715e4969e1909154739e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

AgentTesla

gz 390eedca0cd4c3c6a1d25d637a3f24c20b10bfc20d77715e4969e1909154739e

(this sample)

Bancteian

Executable exe d68a5a2bf92f0f08b8eb6f39351462f81d65d54085c1c7ae3aa81b2d3018434e

  
Dropping
SHA256 d68a5a2bf92f0f08b8eb6f39351462f81d65d54085c1c7ae3aa81b2d3018434e

Comments