MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8
SHA3-384 hash: 24f8b2396afaa47c553a09a1decb03bffe4ffae0b40c972ffe2dff1f24e6d485422fbcdd7dcbb18b06b97a404abcc0d7
SHA1 hash: 9c5ba73a88fd5d247e1dbfd0328be224b41b1a2d
MD5 hash: a70fda4b4cd993b9e3fe737ea6e76860
humanhash: maryland-ack-blue-indigo
File name:A409043090.lzh
Download: download sample
Signature AgentTesla
Create hunting rule
File size:262'964 bytes
First seen:2021-04-08 05:25:47 UTC
Last seen:2021-04-08 13:31:38 UTC
File type: zip
MIME type:application/zip
ssdeep 6144:JGmSEC6JvNtUHY7zaK71o9eazcQgSgjd+RSdj7xpnL8fRi:oWCqP6YrlKB8xdj1pn4g
TLSH 264423B037F81EA2586781AB59DF25D42099CCEC2B1113133F58A7E883ADFC64E5E582
Reporter lowmal3
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
5
# of downloads :
91
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.20655.18166.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Link:
https://labs.inquest.net/dfi/sha256/44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-04-08 02:49:33 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=itfdw2rtcbvbgxfulilgupg6fqfucga6x4fzw64hkoj5kjsmes4a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Eldorado
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 44ca3b6a33106a135cb45a166a3cde2c0b41181ebf0b9b7b875393d5264c24b8

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments