MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a2b8a1e8ffa94d98ae7e7ddbc63662f91020d004362423a78dd1946e1fd708e8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a2b8a1e8ffa94d98ae7e7ddbc63662f91020d004362423a78dd1946e1fd708e8
SHA3-384 hash: e585d73972e6b5504ef5cc62fe996bfcd4addee29a71ef6feabb57a8fd8fe4fde771d1daa2d058adbbafa5ad0b450564
SHA1 hash: 6668dff78ec0225a1fabf7cd813d241bffa50e17
MD5 hash: 472e65188b50e7fddd1c144783478448
humanhash: spaghetti-butter-king-missouri
File name:REMITTANCE COPY..7z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:584'297 bytes
First seen:2020-08-05 14:00:27 UTC
Last seen:2020-08-06 19:48:17 UTC
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 12288:bQr73yRt2bU37MWtlsPiW/heEkoVH2d5BCRMkaRBFEaKRw:sr7rWtlsP2tOK5sRwPFEaKy
TLSH 2FC423A79A0BDE24E5EF5D3A04D8F021DDDA5DDE41332B429564F219C5378E04CEAEB0
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a2b8a1e8ffa94d98ae7e7ddbc63662f91020d004362423a78dd1946e1fd708e8/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-05 14:02:08 UTC
AV detection:
10 of 48 (20.83%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/a2b8a1e8ffa94d98ae7e7ddbc63662f91020d004362423a78dd1946e1fd708e8

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

7z a2b8a1e8ffa94d98ae7e7ddbc63662f91020d004362423a78dd1946e1fd708e8

(this sample)

AgentTesla

Executable exe 239c9e3df55261a7c4037ac8b5693cecb72c0c5d3f832787baea8ad4f1841209

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 239c9e3df55261a7c4037ac8b5693cecb72c0c5d3f832787baea8ad4f1841209
  
Dropping
MD5 ecd4d524988a5ad8813312e23a04c7f7

Comments