MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b44b0c755f07e681f70fcbd3f85b3d74517aa1a0cb1fe34cd7deced681d5b4f6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 3 Yara Comments

SHA256 hash: b44b0c755f07e681f70fcbd3f85b3d74517aa1a0cb1fe34cd7deced681d5b4f6
SHA3-384 hash: 6ea158afddf291ee284a774f9c9d822b14f47a9d813753f10375a03d34b829857ba8f0a0296dd7d3b1e03dd64882bf28
SHA1 hash: 1bd597be9fda9397cb18a18b28fbe0be2abd77ad
MD5 hash: fa8948dc21817a5abb5dc83c67849a92
humanhash: river-artist-fruit-april
File name:PO - 08909.rar
Download: download sample
Signature AgentTesla
File size:422'136 bytes
First seen:2020-06-30 10:18:44 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:cQcEycJaD6YnQXYYi0HdcgGG9s462PCv6F:8EPabQX9hBGG9U2CSF
TLSH 2794238C7BE77A9A8C08B5635E7723DF835A2608FC8DC714BC624A4A5B0EBD045ED50D
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
Global Low
# of uploads 1
# of downloads 25
Origin country US US
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 10:20:07 UTC
AV detection:23 of 48 (47.92%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 18.03%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



rar b44b0c755f07e681f70fcbd3f85b3d74517aa1a0cb1fe34cd7deced681d5b4f6

(this sample)

Delivery method
Distributed via e-mail attachment