MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9ffd774ffa639b926288eab6adafd991d3878fe58b5b17f27c76ed74c0f3ea96. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 9ffd774ffa639b926288eab6adafd991d3878fe58b5b17f27c76ed74c0f3ea96
SHA3-384 hash: 1184de1bf31ee0363448a28836fbf9f05a7eca1c3cb7132697be44efd7e73b7778af4a092e832e0155b4bc77462cc450
SHA1 hash: d764a84a3a80cbb58e2982c90c0398e49ca6699c
MD5 hash: 38ed19d73af4f08795c9c6e10ab4b761
humanhash: skylark-yankee-asparagus-tennis
File name:FIRST PURCHASE ORDER.7z
Download: download sample
Signature AgentTesla
File size:484'903 bytes
First seen:2020-07-22 09:11:47 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:ys1mPjtt6XGO9vbJdMSJodwsuJkyfQ9/0uwpql/3jIDcAYqxIBXAB5XrgTiQNG7X:v86XlvbYSQAYbBjI0q+GfrQ/4Q7Alx
TLSH 5BA4235F25A063F6C0F4C6B3CBA6A1B7F64B3E39305783829C9FB1154AB48398D09975
Reporter jarumlus
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.Skeeyah
Status:
Malicious
First seen:
2020-07-22 09:13:04 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z 9ffd774ffa639b926288eab6adafd991d3878fe58b5b17f27c76ed74c0f3ea96

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments