MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936
SHA3-384 hash: f0657d11015632022f957d6d3f71fd9d891847b4183c9197cb85ead6d380edce5fd4c61b766e0c59a29922638ceb326c
SHA1 hash: 374b317718f7d3c8b29e7337635c6c3fab3ba2d7
MD5 hash: 559fdff90ea530e4d8d582e67f147654
humanhash: failed-cola-bravo-vermont
File name:documents.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:543'403 bytes
First seen:2021-03-19 13:59:44 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:QYS/jwCTqY8HgIBmNXEZN6l8xWbQt4170DfIAMGWczu4Yfv+YxfT7:/SrwC3YyEmgtNgeWAu4Yfmk7
TLSH 00C423D4D7B7948EBE5E4B40E0909892CB791C264FAAF014F973AD83772B0F121526B7
Reporter fabjer
Tags:zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
185
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Zip_Hideexe.5.UNOFFICIAL
Create hunting rule

Result
Verdict:
SUSPICIOUS
Link:
https://labs.inquest.net/dfi/sha256/8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936/
Threat name:
ByteCode-MSIL.Trojan.Injuke
Create hunting rule
Status:
Malicious
First seen:
2021-03-19 11:28:16 UTC
AV detection:
16 of 28 (57.14%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=r7tj3pewmxwbmq5mrudf553fqafwe2hjpolsioqvzstnqnkbbe3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 8fe69dbc9665ec1643ac8d065ef765800b6268e97b97243a15cca6d835410936

(this sample)

AgentTesla

Executable exe 5dd92be22d005624d865ddf07402eb852426fc97baa52bbc58316690d41adb74

  
Dropping
SHA256 5dd92be22d005624d865ddf07402eb852426fc97baa52bbc58316690d41adb74
  
Delivery method
Distributed via e-mail attachment

Comments