MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a5ec5f9acc3a1aa29a96151560c3137c0f27a3ce8269b9d910aa181b51bb5b14. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 4 Yara Comments

SHA256 hash: a5ec5f9acc3a1aa29a96151560c3137c0f27a3ce8269b9d910aa181b51bb5b14
SHA3-384 hash: e6d43f96e8ac50fd62ef9f4e63b098cd8fda5286a8d804aff3cb814d6f2e81b14e4183942fcd28fe817f23f0f941c339
SHA1 hash: 501fdfc9da64b5cf8ca65627091d7ba5a79db666
MD5 hash: 2ed9dad43eb4864cb571cc4f165ead33
humanhash: seven-saturn-solar-burger
File name:REVISED NEW ORDER.pdf.z
Download: download sample
Signature AgentTesla
File size:430'492 bytes
First seen:2020-06-30 13:54:40 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:0YcM68v/oMlPz9B/s2fo2CxoQx9M0gjeoiW7CShMQqQe+3sr81AQWjk:HcnEhhBNo2o/VcziwhMQqQwr81AQWjk
TLSH 38942336CADFEF3C48A4B36E61E55320E9A268674EB564F504E83C434E25F86ED1B5C0
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
Global Low
# of uploads 1
# of downloads 34
Origin country FR FR
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 13:56:04 UTC
AV detection:14 of 48 (29.17%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 25.00%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



zip a5ec5f9acc3a1aa29a96151560c3137c0f27a3ce8269b9d910aa181b51bb5b14

(this sample)

Dropped by
Delivery method
Distributed via e-mail attachment