MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 440e3d4ed9a1eaf774629340045fb889ebbac2904e9d334148663d24fc06d9f5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 440e3d4ed9a1eaf774629340045fb889ebbac2904e9d334148663d24fc06d9f5
SHA3-384 hash: 1fa3baca43a07aaa9c8af05311215332fa20480ee06b900e7e39cbdac195de25bc1a55f24038a4b1f62e58191f26a507
SHA1 hash: e11007a3e3918409177794fed35d23cfbc5dd1eb
MD5 hash: 655ab852d39069dc3c05162214194065
humanhash: helium-pip-ohio-triple
File name:INV-DOCUMENTS_2019EA1120.PDF.Z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:365'583 bytes
First seen:2020-07-12 04:45:10 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:1DGAqRoDbbTjGK9gvl+FcE7N4Xr7/8iWLUTxkM4s4F1BDVq1XNtDK:1aAqsvTz9gvl+qE6tWokMvMVidBK
TLSH F67423921DAE196DE0848AD451B382DFE8AF24998538F777BD2F243907F1D3723E1620
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/440e3d4ed9a1eaf774629340045fb889ebbac2904e9d334148663d24fc06d9f5/
Threat name:
ByteCode-MSIL.Worm.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-07-12 04:47:03 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=iqhd2twzuhvpo5dcsnaaix5yrhv3vquqj2otgqkimy6sj7ag3h2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z 440e3d4ed9a1eaf774629340045fb889ebbac2904e9d334148663d24fc06d9f5

(this sample)

AgentTesla

Executable exe 17a6ef291331acb9fc408450a61d0aabd3db01fcea33592c32c6d955f7d35d19

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 17a6ef291331acb9fc408450a61d0aabd3db01fcea33592c32c6d955f7d35d19
  
Dropping
MD5 5fabcf20e6b192a9a83162a307a92f66

Comments