MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7aebd2ec68c216ca35409ab7a83ddc67ea96551574603b59af17c0d6f2ca7715. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 7aebd2ec68c216ca35409ab7a83ddc67ea96551574603b59af17c0d6f2ca7715
SHA3-384 hash: a0a9a3925b8e8dbc9a63310901078585dac8f2f26246ba1a31131091e33ab26de5ec2bd73ef38d6882374f228d6bd115
SHA1 hash: a428f649d9341adc0f0dfd061202621ec7087606
MD5 hash: c05a1bbbc27f719a15e848f446d24699
humanhash: tango-lamp-florida-white
File name:Requirement.z
Download: download sample
Signature AgentTesla
File size:209'050 bytes
First seen:2020-10-22 02:49:03 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:vHPYirRdwrn/pLYJzy/Esea8+GztAKPXy+e:CrnNYFEZ0+oAgte
TLSH 6A1423D535208D3CF9028CAA572FBE9178BE01F9EF6385097315685CBE3A8B9724F854
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Status:
Malicious
First seen:
2020-10-22 01:31:30 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 7aebd2ec68c216ca35409ab7a83ddc67ea96551574603b59af17c0d6f2ca7715

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments