MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a813da067a4da880b7692230d0820973f13053df7b68988ba54ba8e4f200d363. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 3
| SHA256 hash: | a813da067a4da880b7692230d0820973f13053df7b68988ba54ba8e4f200d363 |
|---|---|
| SHA3-384 hash: | 1953f855253633dcda6ef978690bb314faac0bbd90cdabba2116c32fe6a228fdc25753587bc983b6f228a8b69e61c9fe |
| SHA1 hash: | b23caf490c1ae1be4eb84f85157619236b45dfa9 |
| MD5 hash: | 7fbc86fc4199673b61220e34af044825 |
| humanhash: | leopard-two-fourteen-timing |
| File name: | RFQ #120032020.7z |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 399'610 bytes |
| First seen: | 2020-07-18 14:02:41 UTC |
| Last seen: | Never |
| File type: | 7z |
| MIME type: | application/x-7z-compressed |
| ssdeep | 12288:PzgKvrQQHmI1l4DGzbD7v2AHKLozgm9nm5Y90U0Xi:1xSGzb5sGgmwO905S |
| TLSH | FA8423F1916BE852C404B3E77B290DBDD87E45410C7D99E21A520AF8AE07B5F20CED9E |
| Reporter |  jarumlus |
| Tags: | AgentTesla |
Intelligence
File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-07-16 23:19:27 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
AgentTesla
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.