MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9cf039f17de50455e60eb51fed7638023f7070d1a3101b1fd974c2964747df1d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 9cf039f17de50455e60eb51fed7638023f7070d1a3101b1fd974c2964747df1d
SHA3-384 hash: 63e6e2cd243b1ad64943f897ceeb302946f399ead7d4ecb56a17a8ab3e0131fcfff29c331b5be68d5ab7aa08b02287f7
SHA1 hash: 1d78bfc94f7d8bb816ade416b90b2be6b0b103ae
MD5 hash: 1ecc5dcea6bee28d3d6da9f90c074ee3
humanhash: july-twenty-happy-eight
File name:FedEx's AWB#530532320464350.pdf.zip
Download: download sample
Signature AgentTesla
File size:372'627 bytes
First seen:2020-07-17 20:39:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:8OFSRusXdgViTEbwo6txH3f2yYVkten8vYmc8DkBIYsIW6lal4QJ1u46ofeQilGa:lSsK6Vrit13uLku8vYyOcPsBQTun2CGa
TLSH 31842384211A787AA7BA473CF998F31C8F1919EB56311F604D9CF109EC52DDFCAA3518
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-07-17 19:12:00 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip 9cf039f17de50455e60eb51fed7638023f7070d1a3101b1fd974c2964747df1d

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments