MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4d4f4f3d0f136a6cd4a3ccec7074acfa942075ba74d09f729b4cb21361df13cc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4d4f4f3d0f136a6cd4a3ccec7074acfa942075ba74d09f729b4cb21361df13cc
SHA3-384 hash: 1aed9013045c097a3ab62054474cfcfa68d5e22c8aff76b26966158ac03108dae047393749c2458c37a9fd82954571ad
SHA1 hash: a5b481b60312260d6c300137f7c45583a716b258
MD5 hash: 409f817a25dedc580f1ec7f3ed2ebb45
humanhash: jig-angel-delta-blossom
File name:DOC.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:421'705 bytes
First seen:2020-07-14 14:54:38 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:eBQAEDj0RxxQEF3iqc1XQZcutpS5U5wCAubLUf6o2Gjy85nY8dZPLOeZrVYMUJXY:+Xo0Rxmdqc1X2p93+9jj5nvPyeBVZC5G
TLSH 5D9423BE99A51251F1E638BCE90DC06D1CB28B97FE2E2D6374D9A5CB491233018D3879
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
97
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4d4f4f3d0f136a6cd4a3ccec7074acfa942075ba74d09f729b4cb21361df13cc/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-14 14:56:07 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 4d4f4f3d0f136a6cd4a3ccec7074acfa942075ba74d09f729b4cb21361df13cc

(this sample)

AgentTesla

Executable exe b01fa74e309cff0ee5f5a43a9a908df88a9577d5e21fe251361fa1a89addba06

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b01fa74e309cff0ee5f5a43a9a908df88a9577d5e21fe251361fa1a89addba06
  
Dropping
MD5 cf458db8fe54a5ea272af51fec36de4e

Comments