MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 9c19ea5888f60b53f783f0505b91aed8b7941db56d7f74439b52413a9781ab00. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | 9c19ea5888f60b53f783f0505b91aed8b7941db56d7f74439b52413a9781ab00 |
|---|---|
| SHA3-384 hash: | 4d083144a60f38bc971004aec2d4113bc2020c470eda601aca449f5a3b07c647984f5c62082646755adca07b38ad0f9c |
| SHA1 hash: | ab2772ff7a57b9a87bc5785c7e6a85dff20fa748 |
| MD5 hash: | 75640b15e9854bb47762a3990a077f6a |
| humanhash: | bakerloo-item-pennsylvania-avocado |
| File name: | UPDATED SOA.001 |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 472'646 bytes |
| First seen: | 2020-12-02 06:53:34 UTC |
| Last seen: | 2020-12-02 06:54:22 UTC |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:yXQSDEoDVboWlHoJOSCREmRobIr1pQCYWeRYRTRNHs5:yASDESoWlHoJVWVYIZprleRON4 |
| TLSH | BCA4237A3EB168642B3E4D305350A90C609D89F36476860E3DB65D13AE83FE3DC696F4 |
| Reporter |  GovCERT_CH |
Intelligence
File Origin
# of uploads :
2
# of downloads :
105
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-12-02 01:18:04 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
21 of 48 (43.75%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.