MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a51124c96e88d130b130549e9b9bbf84a304e11561650b67462be2cce32db37f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a51124c96e88d130b130549e9b9bbf84a304e11561650b67462be2cce32db37f
SHA3-384 hash: 88ccc1d4b1efe5b9855062441e2d47f890470e4f457c8062507b540bd951d63c46807cc523cbec60f6bc4d117bf8c22e
SHA1 hash: b453520461dc8d3763fb0d99e1185e1ec2518ed1
MD5 hash: 94664414e4afee2f03aca778f39501e0
humanhash: hot-kentucky-eight-failed
File name:CF and FDA covid-19 certificate test kits___PDF________________________________________________736363654.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:312'571 bytes
First seen:2020-04-05 09:03:49 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:1ZS40n9M2HVb9KjUg5+MZdYs8fGQVmbwXR1vp+NKaUOdnNxVd17/c:1Q4q9M2HR9qf2BfnobMR1vcN3dnNVh/c
TLSH AB642369A517466C7384A911B7736DC86065D04C5082FE388B6B33C3FF2786B5EB4FA2
Reporter abuse_ch
Tags:AgentTesla COVID-19 gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Frs
Create hunting rule
Status:
Malicious
First seen:
2020-04-05 09:35:50 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
19 of 47 (40.43%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=uuisjslorditbmjqkspjxg57qsrqjyivmfsqwz2gfprmzyznwn7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz a51124c96e88d130b130549e9b9bbf84a304e11561650b67462be2cce32db37f

(this sample)

AgentTesla

Executable exe 53dca10fd26f78b0ef4f40e1461416ba9cb256add63ccff9aae60612ebd84239

  
Dropping
MD5 e3fa4d022203e117384f38b46064b634
  
Dropping
SHA256 53dca10fd26f78b0ef4f40e1461416ba9cb256add63ccff9aae60612ebd84239
  
Dropping
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 53dca10fd26f78b0ef4f40e1461416ba9cb256add63ccff9aae60612ebd84239

Comments