MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 3b0b90c05b14eddcfc92e691b364d7dc6b571e69aebda28a881f56beee97205b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 4
| SHA256 hash: | 3b0b90c05b14eddcfc92e691b364d7dc6b571e69aebda28a881f56beee97205b |
|---|---|
| SHA3-384 hash: | 68e14cc68c34a05087176808bcf6ff8f6bef120a476f9e16a4785a51b51c1069ac7cc9f0f9c98c070cd36af5d09ddf00 |
| SHA1 hash: | 32cecde8241166654418826edc9d483036a5cfbe |
| MD5 hash: | b8ed64f7e63ae401e2797e3db11880dd |
| humanhash: | california-sierra-kentucky-louisiana |
| File name: | PO LisT --- Xls.rar |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 597'057 bytes |
| First seen: | 2021-02-07 07:43:01 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:cMiCEtbpusxDNrsVLt+mk7jtmwzxHf0Vtk9ib2e0oGDJegs4aJginyMBf1+:+C0bwYZI5Qtue94Io4Jefv9fQ |
| TLSH | D6C43369098B2234E18B8EC5CABD64BD2D92E9DF7130E5F741E19C68E4BC4DD71322C2 |
| Reporter |  abuse_ch |
| Tags: | AgentTesla rar |
abuse_ch
Malspam distributing AgentTesla:HELO: smtp3.seculonia.net
Sending IP: 212.60.242.180
From: Mr Aditya Goel,<apexlabs@outlast.com>
Subject: Re: Enclosed PO LisT ( Announcing new arrivals)
Attachment: PO LisT --- Xls.rar (contains "PO LisT --- Xls.exe")
AgentTesla FTP exfil server:
ftp.jk2.tech:21
AgentTesla FTP exfil user name:
info1@jk2.tech
Intelligence
File Origin
# of uploads :
1
# of downloads :
211
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-02-07 05:10:30 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropping
AgentTesla
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.