MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 55d86ea8ecbeef22b629a0e78fb6dd5d675e5bcfc700a3e1bd25ea860f862c64. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 55d86ea8ecbeef22b629a0e78fb6dd5d675e5bcfc700a3e1bd25ea860f862c64
SHA3-384 hash: b1bccbab380070dc454996a48de94786213a2e92bd9200a014de27abae55133568785810b673fa5357eb79585bf37b0a
SHA1 hash: a668db15e27484baf3857d222025d20310c7edb6
MD5 hash: 922c1c27e5983f628dfe5967d8f7edad
humanhash: steak-idaho-cola-double
File name:file
Download: download sample
Signature AgentTesla
File size:346'470 bytes
First seen:2020-12-21 15:06:17 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:YYdtqBqn9pWnddU4fLpHY5mXGJi8z+lj2yyxuOwkyftgTTaatNx4:9d8Bq9p8dUYBWBBafUyWTvg
TLSH 70742371E3B8A18EDBD3839EAF09449ABE57D1157DEA05030D244A2B1F4B1CBE17D263
Reporter fabjer
Tags:rar

Intelligence


File Origin
# of uploads :
1
# of downloads :
125
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 55d86ea8ecbeef22b629a0e78fb6dd5d675e5bcfc700a3e1bd25ea860f862c64

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments