MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8fccab27aa3dcbb5ed5ed962f25b2c7016536aaca3f2a5b0624ae2a8ac1c54ae. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 8fccab27aa3dcbb5ed5ed962f25b2c7016536aaca3f2a5b0624ae2a8ac1c54ae
SHA3-384 hash: 5d76fa6f968b7bb34d3eca59d86d5dd0283c384dc6ba57975de6acbf1f3f793a89bce3bc7c23b70cfb9d230bb99fdd9b
SHA1 hash: cb2921c53d7856eb9cde3dbba8ad7568f42fd387
MD5 hash: 71331cf654be64ea7bef3599880525de
humanhash: chicken-yellow-sink-cola
File name:BANK DETAILS.rar
Download: download sample
Signature AgentTesla
File size:427'789 bytes
First seen:2020-05-15 04:56:49 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:HTAmxKxrfhvzfzF3/8z+fTwWIwZFGgaYu1SUm6gHZsB:axrfhfx/jfdlwgBdU0ZsB
TLSH 35942305ACD1F74FE16C96497AD66B1BC6701CCDDD79B92E2C08E9A2C0F8A3C5512E8C
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-05-15 02:33:51 UTC
File Type:
Binary (Archive)
Extracted files:
18
AV detection:
18 of 48 (37.50%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 8fccab27aa3dcbb5ed5ed962f25b2c7016536aaca3f2a5b0624ae2a8ac1c54ae

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments