MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bdbc913cddd05709f72ed0eebe11e0764a6d3f50220dec6dac6e199ae66e5db7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: bdbc913cddd05709f72ed0eebe11e0764a6d3f50220dec6dac6e199ae66e5db7
SHA3-384 hash: c73240ac34df1009dc7a31a3b662b8278d79ff9c8a4369158fac27db3dcc2caf4a08b756935bc9703aacb67bcd898710
SHA1 hash: 04e3754e98c6ae560acbaab9a4751e9efb5de29e
MD5 hash: 21336d1dd7e44bc3bb2d2d39a1e6f7cc
humanhash: zulu-thirteen-undress-cat
File name:SWIFT_876544.iso
Download: download sample
Signature AgentTesla
File size:1'087'488 bytes
First seen:2021-02-04 16:07:08 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:XrUJy2KoEsHFYV4dQKK7v4k00b4v+FYbzXlvwlSNV8J+X73GMX9dfkNL9iDRb/Zc:hoEslXMhlb4vtHlIlSV68b9deL9ixi
TLSH B035BE2033414B68E1FD47F6D13440009BFA9409DFA6E559BDAA4968D27BEECD2E133E
Reporter fabjer
Tags:AgentTesla iso

Intelligence


File Origin
# of uploads :
1
# of downloads :
161
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-02-04 13:13:27 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

iso bdbc913cddd05709f72ed0eebe11e0764a6d3f50220dec6dac6e199ae66e5db7

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments