MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 924fc8da06bfc005a166cad46886e6da7100696640c7fdfdcef2c662343f9946. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 924fc8da06bfc005a166cad46886e6da7100696640c7fdfdcef2c662343f9946
SHA3-384 hash: 844259b7f4fca2e341d18ae8a8b09e5bceef1682ddb5eb957fcd73d800dc0c6c50ccdbfa3f924bb604d593494fea5867
SHA1 hash: 4b482b7f755df71c897e10464f434874b79c58c5
MD5 hash: 264f3ea895bb7b2370f0fca1509d3c75
humanhash: princess-asparagus-wolfram-four
File name:Enq-GSM097HK.r11
Download: download sample
Signature AgentTesla
File size:348'950 bytes
First seen:2020-07-22 13:41:53 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:G4Kpw3S8xHrBqhYvPrSDqWZP5Bf9TWR9HPV+0UJACQdAvYdxIIknWnV7csZ:gwiqLB+YvTStxiveJg3oyVdZ
TLSH E374236BF0A40C5D0996A47652846E45C8F988CB5DF497B66033DCAA312F4EDDC3FB88
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-07-22 13:43:05 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar 924fc8da06bfc005a166cad46886e6da7100696640c7fdfdcef2c662343f9946

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments