MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a4850a594a6993d7473f9eb17d8aa86abd7bcc10a73cdf4e8cdd59de885f20fa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 4
| SHA256 hash: | a4850a594a6993d7473f9eb17d8aa86abd7bcc10a73cdf4e8cdd59de885f20fa |
|---|---|
| SHA3-384 hash: | 3eca8ef280e86e1a9e96b013fa155dc64425f9dbebf274514a78efdd6faeac1aa5322fb806d5406caccd19835cb60964 |
| SHA1 hash: | ae9cfe829d8b54472b563e50e9de03488189b4b5 |
| MD5 hash: | 99c218e4f3f39e1f28bb2d10cc51bd64 |
| humanhash: | beryllium-illinois-bacon-tennessee |
| File name: | INVOICE.iso |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 507'904 bytes |
| First seen: | 2020-11-30 07:47:51 UTC |
| Last seen: | 2020-11-30 12:15:13 UTC |
| File type: | iso |
| MIME type: | application/x-iso9660-image |
| ssdeep | 12288:T8Z+bK/EhFy6eO/BV6IjMT6HtGsgKEjdkEzW:TY+qN6eOnTm6HEjdfzW |
| TLSH | B1B4F01136D29030E5B342B61968D761427FFC324F764A9B738C9A1D1B7A6C0B736BA3 |
| Reporter | |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
2
# of downloads :
133
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-11-30 07:48:06 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.