MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 398326880d507f3c7731113a7c2630e01df8a3013422346c12e55d5ab76efd19. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash: 398326880d507f3c7731113a7c2630e01df8a3013422346c12e55d5ab76efd19
SHA1 hash: 090e7ec176ae4332665bb35b6c52af3a18f1fa43
MD5 hash: b72502adc492cd694cd064d56a93fed5
File name:doQsVLzQv.exe
Download: download sample
Signature AgentTesla
File size:798'208 bytes
First seen:2020-03-23 16:17:08 UTC
Last seen:2020-03-23 16:17:56 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744
ssdeep 6144:brGF/nCL0bI7vhw0VROLN8JLERmZIYXEKPIU1hoeYCCn2+mU6Hb9pbnimsnYHMe:dLvVcxULMmH0qZY3iUU9Vimt
TLSH F5056AC0EE67EA19C16816F0C94DD108C3A4EF496741EE406E86F3DA657270DCDE8AF6
Reporter @HerbieZimmerman
Tags:Agent Telsa AgentTesla RAT


Mail intelligence
Trap location Impact
IT Italy Low
CH Switzerland Low
Global Low
NL Netherlands Low
# of uploads 2
# of downloads 8
Origin country US US
ClamAV No detection
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 13.89%

File information

The table below shows additional information about this malware sample such as AV detection and external references.

Delivery method
Distributed via e-mail attachment