MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 90765b9f31057e45a9e670f1638c2f13cd3fd16d7fa5180bcc2bcef1a7d71a21. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 90765b9f31057e45a9e670f1638c2f13cd3fd16d7fa5180bcc2bcef1a7d71a21 |
|---|---|
| SHA3-384 hash: | 1780627ee9e7430dad4d975524cb94535d4d032449bcf8bdfd2d570287ef36b3f3872c414e9082fd79801d78bb7cd62f |
| SHA1 hash: | 22c6335ca10f56dfe67bfc18de7ca81bdca0874a |
| MD5 hash: | ccc015c41563d6a5f1dfd1b884d28dfc |
| humanhash: | crazy-butter-may-moon |
| File name: | InvoiceEN6000585.PDF__________________________________________________________.r13 |
| Download: | download sample |
| File size: | 6'000 bytes |
| First seen: | 2021-03-03 07:35:04 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 96:Odrh50IPVKrgscvgJIsK61SjUiAN+YnofMk6vrOUhUEkmrmgYXLYVdo0W9vbz4Q9:OhXTVKJcCIsd1OUimPXrhCfmrmhsVHcT |
| TLSH | 65C16D566B1EA421F2B4B1388D8B2BDCA308D225C8B911D132DBB0546FFDF29B344F95 |
| Reporter |  abuse_ch |
| Tags: | r13 |
abuse_ch
Malspam distributing unidentified malware:HELO: floryatekstil.com
Sending IP: 185.29.8.55
From: info <info@floryatekstil.com>
Subject: Payment For Outstanding Invoices
Attachment: InvoiceEN6000585.PDF__________________________________________________________.r13 (contains "InvoiceEN6000585.PDF__________________________________________________________.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-03-03 07:35:25 UTC
AV detection:
21 of 47 (44.68%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip 90765b9f31057e45a9e670f1638c2f13cd3fd16d7fa5180bcc2bcef1a7d71a21
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.