MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 3 Yara Comments

SHA256 hash: 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49
SHA3-384 hash: f18d4bd3fd47cfe2e5e39f36373a73aee4c384f284250b2f93391531537ec936b02e463e42e5a065e711d377636ca408
SHA1 hash: fa041d3ec576b1b61dccebcc2c02d3bb1cad78cd
MD5 hash: 41e0a98da8a82aae32787bbf2b2f72c7
humanhash: idaho-winter-alanine-hawaii
File name:FT20178L5354.rar
Download: download sample
Signature AgentTesla
File size:377'424 bytes
First seen:2020-06-30 12:38:50 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:pXL0a7ixROD8kh/DxsmOlr93KzTmpfHUYmE/dKQoe91ZYjaVX7rtXkqFPdLcwv:p17F8khtsL5R0mpfHUYmE/dMU1ZYeVr1
TLSH 1284235095BB04A9EF33D5EB08AECFCDF945C68C9570725036B197C4AC1E9A7D0287E2
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
IT Italy Low
Global Medium
# of uploads 1
# of downloads 24
Origin country FR FR
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Frs
First seen:2020-06-30 12:40:06 UTC
AV detection:10 of 30 (33.33%)
Threat level:   5/5
Spamhaus Hash Blocklist :Suspicious file
VirusTotal:Virustotal results 6.45%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



rar 90b3c9461e5cba3534cb39dd6ba4a88b5029436f08bef312b21ca9580fefad49

(this sample)

Delivery method
Distributed via e-mail attachment