MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41dbb5289897829a9c864a2669e257dd6762845732a90f1129a84b04c22db26f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 41dbb5289897829a9c864a2669e257dd6762845732a90f1129a84b04c22db26f
SHA3-384 hash: d2e49a39d4351ccd61179983de997785860e82542aef62f35f19de10a4ded65e3a8e75f37bcc6faac3b79a3fd2099457
SHA1 hash: d1c3f566f563788890ebfee803fab05f62188fa9
MD5 hash: 9dd9b464b2936cdd6f50dbf275c551c1
humanhash: bacon-lemon-georgia-yankee
File name:PPR & CPR_HEA_DECEMBER 4 2020.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:891'001 bytes
First seen:2020-12-04 10:05:05 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:OCsKbK8fFjV3M2cEbWeqpaL1XYZrwXOaUch72O/Aoq:OCsq7MOLqm1qwmyAoq
TLSH 18153342D727FCB7AC2080A56EC7942AC6767A6DC9C1F3999845D562683FF2B26340C3
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
161
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.InjectNET.14.16440.16882.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/41dbb5289897829a9c864a2669e257dd6762845732a90f1129a84b04c22db26f/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-12-04 04:56:48 UTC
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ihn3kkeys6bjvhegjitgtysx3vtwfbcxgkuq6ejjvbfqjqrnwjxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.75
Link:
https://yomi.yoroi.company/submissions/41dbb5289897829a9c864a2669e257dd6762845732a90f1129a84b04c22db26f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 41dbb5289897829a9c864a2669e257dd6762845732a90f1129a84b04c22db26f

(this sample)

AgentTesla

Executable exe be5df7675488454395e58449c06ddd33f82c2531c8ddaad7a054b8c4a04ef5f2

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 be5df7675488454395e58449c06ddd33f82c2531c8ddaad7a054b8c4a04ef5f2
  
Dropping
MD5 622043df7f9dffa5da28f5b32f1efc99

Comments