MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5cdd5be04d85eb7b305064d4e8b82e23b20a667ee114cf9510562561c6e392de. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 5cdd5be04d85eb7b305064d4e8b82e23b20a667ee114cf9510562561c6e392de
SHA3-384 hash: 4bdf3e3bc5edf5ea94a1784f8797fd30ec76532116f5ec34ebbc24c77886afc0971f1680bffc24f96598530e57c04b6c
SHA1 hash: f2adbd6a0a28d05831ed59a47dfb185efced6692
MD5 hash: 2a34b344e2b7497660de38ec7e1c1fbb
humanhash: illinois-mississippi-avocado-johnny
File name:MV TAN BINH 135.pdf.gz
Download: download sample
Signature AgentTesla
File size:661'726 bytes
First seen:2021-01-26 16:41:51 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:amfV6cAH2Z1Y96jJiRqXhnxDG4h4qh8vE72Y3cfVtHd6n:qcAWZ1Q6jUEPDiGUsV3c30n
TLSH E5E4236C44827B76EC983A7DBB8055BB58034AE113193347CBFB4BD1427CB57B2B61A2
Reporter fabjer
Tags:gz

Intelligence


File Origin
# of uploads :
1
# of downloads :
168
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-01-26 11:50:55 UTC
AV detection:
13 of 46 (28.26%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 5cdd5be04d85eb7b305064d4e8b82e23b20a667ee114cf9510562561c6e392de

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments