MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a4850a594a6993d7473f9eb17d8aa86abd7bcc10a73cdf4e8cdd59de885f20fa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: a4850a594a6993d7473f9eb17d8aa86abd7bcc10a73cdf4e8cdd59de885f20fa
SHA3-384 hash: 3eca8ef280e86e1a9e96b013fa155dc64425f9dbebf274514a78efdd6faeac1aa5322fb806d5406caccd19835cb60964
SHA1 hash: ae9cfe829d8b54472b563e50e9de03488189b4b5
MD5 hash: 99c218e4f3f39e1f28bb2d10cc51bd64
humanhash: beryllium-illinois-bacon-tennessee
File name:INVOICE.iso
Download: download sample
Signature AgentTesla
File size:507'904 bytes
First seen:2020-11-30 07:47:51 UTC
Last seen:2020-11-30 12:15:13 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:T8Z+bK/EhFy6eO/BV6IjMT6HtGsgKEjdkEzW:TY+qN6eOnTm6HEjdfzW
TLSH B1B4F01136D29030E5B342B61968D761427FFC324F764A9B738C9A1D1B7A6C0B736BA3
Reporter lowmal3
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
2
# of downloads :
133
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-11-30 07:48:06 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso a4850a594a6993d7473f9eb17d8aa86abd7bcc10a73cdf4e8cdd59de885f20fa

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments