MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cd31ed325e997a76dff05ff7b72dc7d360bcd906e71e5096b8e90051a16d809. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8cd31ed325e997a76dff05ff7b72dc7d360bcd906e71e5096b8e90051a16d809
SHA3-384 hash: 622e70781d99891ba274db2efdf62349a687abbf2ca4b135cf163841cc2299307bc476ff16d41177618c05ab034e92cd
SHA1 hash: 0473f678fe37d0488938afde2ae682cc3668e443
MD5 hash: d4758bec84fd18f575cad50dd5411779
humanhash: jupiter-saturn-moon-pasta
File name:Mcdermott B0047-177757.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'236'944 bytes
First seen:2020-12-04 06:47:46 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:8Eoa4sqDshYjyrw6oCi+svoZq/HtuBCXEXCUy:8Ef4sqDshASw6HUMq/NuBTXCn
TLSH A345336EC8F58F03090960DDF022A9FDE5B1EBBED2D553BE31AD6536B8D0B8E0641560
Reporter fabjer
Tags:archive

Intelligence

File Origin
# of uploads :
1
# of downloads :
180
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Inject4.6091.5234.20787.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8cd31ed325e997a76dff05ff7b72dc7d360bcd906e71e5096b8e90051a16d809/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-12-03 16:49:42 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rtjr5uzf5gl2o3p7ax7xw4w4pu3axtmqnzy6kcllr2iakgqw3aeq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8cd31ed325e997a76dff05ff7b72dc7d360bcd906e71e5096b8e90051a16d809

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 8cd31ed325e997a76dff05ff7b72dc7d360bcd906e71e5096b8e90051a16d809

(this sample)

AgentTesla

Executable exe 14e825ebed2c7886f5e5841724b4ae7f5c0b7bd2c46ea94dffee74381e1fc73f

  
Dropping
SHA256 14e825ebed2c7886f5e5841724b4ae7f5c0b7bd2c46ea94dffee74381e1fc73f
  
Delivery method
Distributed via e-mail attachment

Comments