MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 90212d26bc695b1aec5fbd069265688c2068d499e49b329bf70e86e2a3373b84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 90212d26bc695b1aec5fbd069265688c2068d499e49b329bf70e86e2a3373b84
SHA3-384 hash: 4fb7385a1f8dbfa9f0e39fc6aa5a7d92ce1d3bc4f2f988ad3451237c160e295b252d39fcc2b8b86229ee54ecc6170d6f
SHA1 hash: 3df06b84c4a5124c3d198377c26d77bed90dcab2
MD5 hash: 649e20126ebe24b44f7b88c3b026bfad
humanhash: cup-bulldog-stairway-queen
File name:RFQ546SP13545 CIVIL (4080).7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:1'301'398 bytes
First seen:2020-03-26 06:14:49 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 24576:6LRObzO3Vnib6ikZWthkBWJPmbWdfnsDHUnQwAApQI4JUStF4g9fBxDVcgeB+fh3:kRcO1i7J+bWdfnsDHUnQwArIkVF4gxvj
TLSH B855332EA424C43B663FF9B9695C8337A2516339F71793A24A4C4373F56A7CE61D0807
Reporter cocaman
Tags:7z

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27684.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.AIT.Trojan.Nymeria.1583.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-03-26 02:27:50 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
22 of 47 (46.81%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 90212d26bc695b1aec5fbd069265688c2068d499e49b329bf70e86e2a3373b84

(this sample)

AgentTesla

Executable exe 238b5720f4f7c36b7eb7c7d894a94ed70caece21b28db5d02ef04040bc3681ec

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 238b5720f4f7c36b7eb7c7d894a94ed70caece21b28db5d02ef04040bc3681ec

Comments