MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6598d6389088f00f507a2ca6960a38f591e4f4126304e12eba63e7726810a4d6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 6598d6389088f00f507a2ca6960a38f591e4f4126304e12eba63e7726810a4d6
SHA3-384 hash: 9b5357a9e816ae5b7e307050719241402edb147914c93524f1c43b83f347f3096532cd2bf036fb6c2249a7954c346fcc
SHA1 hash: 00b4d22d8c1b2f0e3e787b09901d1abe0bd33f5a
MD5 hash: ab12d3d7e4bfded1294c74daacccb75d
humanhash: white-washington-eight-fish
File name:Purchase Order.iso
Download: download sample
Signature AgentTesla
File size:1'329'152 bytes
First seen:2021-01-29 07:40:39 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 24576:2m2yj5C4RFbsRzuhBu6LtrFa5t4fwlEysMipa:Lt1CabsRGusl6t4csM
TLSH 8455DF59E2A99236F07A3774157153300BBE7D2AA932D61E7D8A31CC1A32BC14AD3F17
Reporter fabjer
Tags:iso

Intelligence


File Origin
# of uploads :
1
# of downloads :
98
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Zmutzy
Status:
Malicious
First seen:
2021-01-29 07:41:08 UTC
AV detection:
11 of 46 (23.91%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso 6598d6389088f00f507a2ca6960a38f591e4f4126304e12eba63e7726810a4d6

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments