MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a0c72a7411894a788b46488b23dccd50cb4d090f5f62d6af66a6cb2ba120d3b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | a0c72a7411894a788b46488b23dccd50cb4d090f5f62d6af66a6cb2ba120d3b6 |
|---|---|
| SHA3-384 hash: | 0711570bbd06ed56d998a3f02a455d352acd08c35d2170a68da155ebeef3ffd000ed16295531531d4c4bf677216879db |
| SHA1 hash: | 76aa007cef5c0a7d02b3cea3e5b73c344c4243ea |
| MD5 hash: | 198deb2f2f7bb944fa7259d07a1c7c2b |
| humanhash: | moon-juliet-shade-shade |
| File name: | Swift copy.doc.rar |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 421'359 bytes |
| First seen: | 2020-06-17 08:27:52 UTC |
| Last seen: | 2020-06-17 11:13:09 UTC |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:lRWsI+SU5EeAvD5mIPtNrK+V/bIqXIwiCXORbA2Mt0/cl0dz:ltI+SUeeY5RPua/lY0em7W/cCl |
| TLSH | AF9423C67501683A3DD88676F77EF199833B2FEC1641BB0A93B186FD1488A84B53D41E |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
4
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Status:
Malicious
First seen:
2020-06-17 08:29:03 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
15 of 29 (51.72%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.Malicious email
From: "Carla Dall'Olio" <carla@eurotrading.bologna.it>
Received: from eurotrading.bologna.it (unknown [185.222.58.143])
Date: 17 Jun 2020 02:15:33 -0700
Subject: Re:Pending Payment (EXCHANGE RATE)
Attachment: Swift copy.doc.rar