MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315
SHA3-384 hash:	d850b6d129430a29b476553b6bd2f55a94cb00dbf9488b4c67704dda1eb679857958d5322bf6da7e922994bc9d48fcab
SHA1 hash:	7d2daa32879fa9d8c617af43b03215496ead6b35
MD5 hash:	f70d530338a208cdcb5ebf9ce09dfd97
humanhash:	neptune-fix-rugby-north
File name:	f70d530338a208cdcb5ebf9ce09dfd97.bat
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	7'936 bytes
First seen:	2026-05-16 22:33:58 UTC
Last seen:	Never
File type:	bat
MIME type:	text/x-msdos-batch
ssdeep	96:IuCf9IQa8LhLbsMwoOAbqsYAQzayCbYUEH5KVq2ayCBcP5E:KSB8VkfhsYFavQ5Ko2a+P5E
Threatray	3'686 similar samples on MalwareBazaar
TLSH	T15EF128254B8E36BBBC473C86B15E4514DE45503E17DAE4B6A00C2D2B1FD2DDF9F22095
Magika	batch
Reporter	BastianHein
Tags:	AgentTesla bat

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

96

Origin country :

CL

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN agenttesla

Malware family:

agenttesla

Alert

Create hunting rule

ID:

1

File name:

_7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315.txt

Verdict:

Malicious activity

Analysis date:

2026-05-16 22:35:42 UTC

Tags:

loader auto-startup autoit stealer evasion ultravnc rmm-tool agenttesla amsi-bypass

Link:

https://app.any.run/tasks/3f0ed5a0-4106-45bb-afe1-1a1f6e0f9c33

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/66159/

CyberFortress Malicious

Verdict:

Malicious

Score:

91.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a08f0fb953bbcef1c90cc92

Tags:

obfuscated shell sage

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

crypto obfuscated powershell

Link:

https://www.filescan.io/uploads/6a08f0f678f38c56ac711e48/reports/ff02184f-0402-472d-8c69-83009ed39591/overview

Hybrid Analysis PowerShell/TrojanDownloader.Agent

Verdict:

Malicious

Labled as:

PowerShell/TrojanDownloader.Agent

Link:

https://www.hybrid-analysis.com/sample/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

unix shell

First seen:

2026-05-16T19:39:00Z UTC

Last seen:

2026-05-17T18:22:00Z UTC

Hits:

~10

Detections:

HEUR:Trojan.BAT.Generic HEUR:HackTool.Multi.AmsiETWPatch.gen Backdoor.MSIL.Cardinal.sb Trojan.PowerShell.Cobalt.sb HEUR:Trojan.Script.Obfus.gen

Link:

https://opentip.kaspersky.com/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315/results?tab=lookup

Nucleon Malprob Susipicious

Score:

53%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315

CERT.PL MWDB agenttesla

Detection:

agenttesla

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315/

Neiki Family.AGENTTESLA

Verdict:

Malicious

Threat:

Family.AGENTTESLA

Link:

https://tip.neiki.dev/file/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315

ReversingLabs TitaniumCloud Win32.Trojan.Egairtigado

Threat name:

Win32.Trojan.Egairtigado

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-05-16 22:34:58 UTC

File Type:

Text (Batch)

AV detection:

12 of 38 (31.58%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pu6yho4y747lt6n7rl7m6s2vvooy4ydptqm3thlbihbcjk3fqmkq._file

Threatray agenttesla

Verdict:

malicious

Label(s):

agenttesla

Alert

Create hunting rule

Similar samples:

494b7386dd15192888bf519e0f72d74597f20d03835bf567756096627df6325b

AgentTesla

9079dcbdc9ef5c34052eb9e8c1d2f80be47c3f1dffa4414f83e9b911ca30a6c8

AgentTesla

a0f64f3bb700ae9170efc662301196fe5d635dbbc72985164537a87602d6bf16

AgentTesla

c0f929fbda0636928fd4d45a72103f40cd108145c67d8b7e5d53485665cea25d

AgentTesla

error

AgentTesla

+ 3'676 additional samples on MalwareBazaar

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/7d3d83bb98ff3eb9f9bf8afecf4b55ab9d8e606f9c19b99d6141c224ab658315

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Cape

https://www.capesandbox.com/analysis/66159/