MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92d986077fce0e97af794b962a74379150d7ce48591ef4069e329566587042ad. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 92d986077fce0e97af794b962a74379150d7ce48591ef4069e329566587042ad
SHA3-384 hash: 821c0ebb7b8594474b6c3e3b8d11e1c554360dc745de874559ae8aa58df087d495f0a380e7f5c4b3b7849d3acec170a2
SHA1 hash: 4bfbba188417e0cf440768f879e3ca345e98493e
MD5 hash: 3b65c984107df7b860710d8495d55f50
humanhash: twelve-whiskey-purple-neptune
File name:OUTSTANDING-INVOICE.7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:408'571 bytes
First seen:2020-07-16 22:43:55 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:hWG7FZIDwQUkU4yoW4WaovrQxZ2Lei+x0OCWjViO5Mh5iUAem2fqJpK4:4G7DXQY52Wv82Ci+vkOChxS2fepK4
TLSH C894235B8789337AF57EEA7735BD0B93B1F2CA984A959DF002968440B01303AF634D9D
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/92d986077fce0e97af794b962a74379150d7ce48591ef4069e329566587042ad/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-16 03:59:54 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 92d986077fce0e97af794b962a74379150d7ce48591ef4069e329566587042ad

(this sample)

AgentTesla

Executable exe 895caf8a32b031db037f0b3be265ebc5a909b4f1f1880a252795458a87bf1214

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 895caf8a32b031db037f0b3be265ebc5a909b4f1f1880a252795458a87bf1214
  
Dropping
MD5 545352c3b443c8d949fb9bf068be1aef

Comments