MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 857a78bcb05835047a737295703f051353e3b11c0829c96be219a4b6302afd10. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 857a78bcb05835047a737295703f051353e3b11c0829c96be219a4b6302afd10
SHA3-384 hash: cf4fe6cfa29dc0992dd28dbf0acd5a9e83b430c50b14ec0720d3bc3affabed1a1b5e64c9b5d8a25b6a6f514f6215b2af
SHA1 hash: 0d15903a2320786db553ed75fcc92aa130f91300
MD5 hash: fadd15330c710ae2b651e95b7bae1a34
humanhash: twelve-quiet-north-california
File name:TT No. 00189330982.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:653'498 bytes
First seen:2020-10-14 00:47:13 UTC
Last seen:2020-10-14 01:38:56 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:rQAN/qGPB/scLQmgQUcxeHVT0VVVk4Rb47RAoxYePdGNXaMD8T9:rfNRB/rkVT0/6FOCJVGFaP
TLSH 4ED433824A942E0CC351EE1D99FC2C45B9D3D2E382358577F82877D8E56BD38E921CB9
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
5
# of downloads :
97
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Packed2.42621.19445.18708.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/857a78bcb05835047a737295703f051353e3b11c0829c96be219a4b6302afd10/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-13 22:54:04 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qv5hrpfqla2qi6ttokkxapyfcnj6hmi4bau4s27cdgslmmbk7uia._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/857a78bcb05835047a737295703f051353e3b11c0829c96be219a4b6302afd10

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 857a78bcb05835047a737295703f051353e3b11c0829c96be219a4b6302afd10

(this sample)

AgentTesla

Executable exe ffbc4a39ad58fc82025ec9dd1abcba049dc7c66a1ccb8b71fe2171e65f41b526

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ffbc4a39ad58fc82025ec9dd1abcba049dc7c66a1ccb8b71fe2171e65f41b526
  
Dropping
MD5 1623d0bccf0f6de8a12599e540397e05

Comments