MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6e7b84dee189e2eb6641e56bb022d23fdbf57289350a156ca2074e9ff927c1a5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6e7b84dee189e2eb6641e56bb022d23fdbf57289350a156ca2074e9ff927c1a5
SHA3-384 hash: fd4b43528991f91cad80f97653937cafe8b85d37fe7b367021a0df11331b545c262b5114272a3ce05be471a2b194b458
SHA1 hash: f077bce5b4c7b6fc6aceb510b713c54872c37412
MD5 hash: ee516855012240f1c9feeb36b9d6b643
humanhash: cup-summer-moon-solar
File name:SOA PROFORMA INVOICE.r00
Download: download sample
Signature AgentTesla
Create hunting rule
File size:544'631 bytes
First seen:2020-10-30 13:40:04 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 12288:FxviGDj6EP8vRsaXym4GrO/uA4QHMKHW5cMxq6NZJzeBK4p:FxviGKEP8vRsG4WA4QsK2SJCl8K4p
TLSH 71C423B16AE1328744EEE612C8250CEEDF6EAE64F5020D94B437AFE4121353E69DD743
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6e7b84dee189e2eb6641e56bb022d23fdbf57289350a156ca2074e9ff927c1a5/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-30 12:16:15 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=nz5yjxxbrhrowzsb4vv3aiwsh7n7k4ujgufbk3fca5hj76jhygsq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/6e7b84dee189e2eb6641e56bb022d23fdbf57289350a156ca2074e9ff927c1a5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

r00 6e7b84dee189e2eb6641e56bb022d23fdbf57289350a156ca2074e9ff927c1a5

(this sample)

AgentTesla

Executable exe a9f85809eedc7a4033fa134ae35c2b9ab4de23ee6b2bd923662656d531d3236e

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a9f85809eedc7a4033fa134ae35c2b9ab4de23ee6b2bd923662656d531d3236e
  
Dropping
MD5 2332ecea4028b0e745779dd3b245eb04

Comments