MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 59b230d608d121a6969fa2eab41b020c57f99328319ebd92ef00cb4081562589. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 59b230d608d121a6969fa2eab41b020c57f99328319ebd92ef00cb4081562589
SHA3-384 hash: 5b66f3ed87506d46d570ed4fa320854fe0f6f9405b91ee7df8f5137be1ff28df2875700915405bdfda85657b7e294beb
SHA1 hash: 4b7695dfbccbdc500f68efe7d72b05d9b3a20094
MD5 hash: 3e2f137d4c3c50b5c948ada299a19874
humanhash: georgia-timing-muppet-carbon
File name:SecuriteInfo.com.Heur.MSIL.Bladabindi.1.28659.15654
Download: download sample
Signature AgentTesla
Create hunting rule
File size:330'240 bytes
First seen:2020-07-11 11:44:19 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'204 x SnakeKeylogger)
ssdeep 6144:AEti+h/WJIL7VunpD7Qvm4u1misRvOYcGoUZtuPKak/fKT9AKRM:ztiu+2V0CmFmXRvtNpt7lK5AKW
Threatray 50 similar samples on MalwareBazaar
TLSH C764D00677858B11D86800F640EF206503F4BE9BB676E7543F8C3ED84A31FA2AE46F59
Reporter SecuriteInfoCom
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/24668/
Detection(s):
SecuriteInfo.com.Heur.MSIL.Bladabindi.1.28659.15654.UNOFFICIAL
Create hunting rule

Result
Verdict:
Clean
Maliciousness:
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/59b230d608d121a6969fa2eab41b020c57f99328319ebd92ef00cb4081562589/
Threat name:
ByteCode-MSIL.Adware.CSDIMonetize
Create hunting rule
Status:
Malicious
First seen:
2020-07-11 03:52:09 UTC
AV detection:
21 of 29 (72.41%)
Threat level:
  1/5
Verdict:
malicious
Label(s):
agenttesla
Create hunting rule
Similar samples:
1aca49752cef2bb58d097e0ac96963e32f14e4e6b1e6e24e11125d1e9ef54cf2
AgentTesla
618f4050d767d0c8f835ec3fa9e46b85b9291062a2e381122852238fa84c95f7
AgentTesla
733036ae8101048351d1cf684fe1bc02c1cf7a70725a470bec7cbd59a602738b
AgentTesla
95a191b5e1728a1dc9a0007719ae7adba5be88b1ae5e8919185c91a201148a51
AgentTesla
b2f041348835c102db3769245ee4c28dd00cb19c3c6710fc9c11228f3bbce61b
AgentTesla
eac957f655d15206f8875a31eb0b225040ee39015ff01189901f78230e39c33f
AgentTesla
f1d81ae5a4ea7a71d5d7147565fecca141a8e03148ef3c9e7583b9159923d17a
AgentTesla
f41d910195a48409a0d7047fa3e9d2d62b19361c92f8f2f045d9a4ba7a0e869e
AgentTesla
f95573e18dd16600bedc2ab6917774a91603d5e90ae5deccfa969a8311802972
AgentTesla
f9b03c723f0707c47dc00e0d77ac55559d2cd07cd6b38a67126e535068ca05dc
AgentTesla
+ 40 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/200711-sg32t1va5n/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

AgentTesla

Executable exe 59b230d608d121a6969fa2eab41b020c57f99328319ebd92ef00cb4081562589

(this sample)

Cape
Cape
https://www.capesandbox.com/analysis/24668/
  
URLhaus
https://urlhaus.abuse.ch/url/411802/
  
Delivery method
Distributed via web download

Comments