MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 4a9d761102283a494ff2b7a5ba12dc0e6bfda323c7eb99de2e1770add500d4e0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 2
| SHA256 hash: | 4a9d761102283a494ff2b7a5ba12dc0e6bfda323c7eb99de2e1770add500d4e0 |
|---|---|
| SHA3-384 hash: | b4a2692cbd52a291143cb5719239a0247f716f87b1b092c2c7fc2868a4eb5f2cddca9426436c15c14e727582c3dbab22 |
| SHA1 hash: | aab270488a5cab7c33c06c8dfae336436fce6129 |
| MD5 hash: | b4728f2ae54131d0ba95f4aff2f3fece |
| humanhash: | utah-stream-louisiana-angel |
| File name: | PO #5618896.gz |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 1'074'417 bytes |
| First seen: | 2020-11-19 07:10:11 UTC |
| Last seen: | Never |
| File type: | gz |
| MIME type: | application/gzip |
| ssdeep | 24576:+ZRIX8tDt7hDv6j5bkZvlGsIzBwVubI5TTM0KN6JemarZyFuo:+ZCgRlDYcE8zONAmK |
| TLSH | BE353391BC2D53188F42A63815BCB66291A570CDCB7FF114D5873C0AEAEB0D2BB86764 |
| Reporter |  cocaman |
| Tags: | AgentTesla gz |
cocaman
Malicious email (T1566.001)From: ""Melissa Gargia" <supansa.c@514.vuniso.ml>" (likely spoofed)
Received: "from vmv0.514.vuniso.ml (vmv0.514.vuniso.ml [161.35.80.48]) "
Date: "Wed, 18 Nov 2020 23:09:04 -0800"
Subject: "Quotations for New Order"
Attachment: "PO #5618896.gz"
Intelligence
File Origin
# of uploads :
1
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Dropping
AgentTesla
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.