MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 403d472e21ec125246769b1b97ea6c61920e6fc1a146b5465654bc70ea806553. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments

SHA256 hash: 403d472e21ec125246769b1b97ea6c61920e6fc1a146b5465654bc70ea806553
SHA3-384 hash: a88bec383c3e9d3c73e0aa3385a135925a46dffa195886f5dbf95f6666880c581f094712d5f583bf31c952073186e14f
SHA1 hash: 5e92dec2ae2bf9d0e1a9965da828e96fd00f162c
MD5 hash: edbe3755858ada0c83d0ac2d87e5cbf9
humanhash: network-saturn-chicken-montana
File name:edbe3755858ada0c83d0ac2d87e5cbf9.exe
Download: download sample
Signature AgentTesla
File size:290'717 bytes
First seen:2021-05-04 15:34:45 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 6144:ZSi5Za+LXdkcmt21Ru6dT5WRYFCmoIa50:ZSivlLmcmILdT5WCfoIa50
TLSH DD549E7768849D2EDEB5C6358CF206F3E92961CF3E43881E919D13054613BA77F8A22D
Reporter abuse_ch
Tags:AgentTesla exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
120
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Unpacked files
SH256 hash:
403d472e21ec125246769b1b97ea6c61920e6fc1a146b5465654bc70ea806553
MD5 hash:
edbe3755858ada0c83d0ac2d87e5cbf9
SHA1 hash:
5e92dec2ae2bf9d0e1a9965da828e96fd00f162c
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

AgentTesla

Executable exe 403d472e21ec125246769b1b97ea6c61920e6fc1a146b5465654bc70ea806553

(this sample)

  
Delivery method
Distributed via web download

Comments