MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 5ee3ca51cf5919dd98100970dad242901426d4702e99bfac9ad84497756813ba. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 5ee3ca51cf5919dd98100970dad242901426d4702e99bfac9ad84497756813ba |
|---|---|
| SHA3-384 hash: | 55dbe55ec62d80e9a99f01054e490f93793a151314868fe4492e19c2833b04f23e3195f4334e24c694f88b31bc6e8aab |
| SHA1 hash: | c76a248a2ebd9b3cee40922b2496b4f14f2fce48 |
| MD5 hash: | ae61a11d6f551abbb6e053c7507a7564 |
| humanhash: | lactose-comet-delta-charlie |
| File name: | ledger.r00 |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 611'293 bytes |
| First seen: | 2020-10-09 14:23:49 UTC |
| Last seen: | 2020-10-11 06:06:51 UTC |
| File type: | r00 |
| MIME type: | application/x-rar |
| ssdeep | 12288:vUWz4wSHmJrAml5looXCOgUEuP6fwShWjqKWK7X4uFu4VIIi3WQByr5r0YpYEF:cDwSHm2s4oSOgU+E+28uE4iIiib |
| TLSH | 28D4235DFB68015CBE35D5FABF01A7128969BE52FD5E371137242C295E0A8188B80BCF |
| Reporter |  GovCERT_CH |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
5
# of downloads :
100
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Backdoor.NanoCore
Status:
Malicious
First seen:
2020-10-09 00:39:55 UTC
File Type:
Binary (Archive)
Extracted files:
19
AV detection:
20 of 29 (68.97%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
AgentTesla
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.