MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8c4cd4e155f4543d4a67e6808ed8c54ad2a06469e4be3d968d730d08a6a8a98f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8c4cd4e155f4543d4a67e6808ed8c54ad2a06469e4be3d968d730d08a6a8a98f
SHA3-384 hash: c42f688f11d2c1e23b70d2477c2c16ea4caef3ae6752a8ce20e3b7d4f0b57fcbb4a9ae79f74d74b8402982717e48d192
SHA1 hash: 93dbe27c82c1c6b59cf1884e2332d1e779bba530
MD5 hash: c896e7e4906b8abfaab48d454a711068
humanhash: eleven-montana-missouri-stairway
File name:Scan-Copy.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:524'318 bytes
First seen:2020-08-19 07:33:25 UTC
Last seen:2020-08-20 05:25:07 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:OFjnvc+MBEAPN6ZXGNjdQRv/B3Go+zS4lCRvOZyhM:OFjvc+MPoXaO5p38S4io
TLSH 46B423CD9DE13F46039E10AE369FC1E6AA4C40CC8736E90FA4B7DA0C65549E6A4DB439
Reporter cocaman
Tags:AgentTesla zip


Avatar
cocaman
Malicious email
From: account.pom_1@homestatepng.com
Received: from homestatepng.com (unknown [185.222.57.205])
Date: 19 Aug 2020 11:25:33 -0700
Subject: Re:Updated Statement Of Account for J&Z Trading 19.08.2020
Attachment: Scan-Copy.zip

Intelligence

File Origin
# of uploads :
4
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8c4cd4e155f4543d4a67e6808ed8c54ad2a06469e4be3d968d730d08a6a8a98f/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-19 07:35:06 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rrgnjykv6rkd2sth42ai5wgfjljkazdj4s7d3funomgqrjvivghq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8c4cd4e155f4543d4a67e6808ed8c54ad2a06469e4be3d968d730d08a6a8a98f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 8c4cd4e155f4543d4a67e6808ed8c54ad2a06469e4be3d968d730d08a6a8a98f

(this sample)

AgentTesla

Executable exe 8783057cc8930a463131d8ff23512b98eb99be7c1fec90de2be9da89e56d1c3b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8783057cc8930a463131d8ff23512b98eb99be7c1fec90de2be9da89e56d1c3b
  
Dropping
AgentTesla

Comments