MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c075b8c9ade69d2918f5feea0e9c34bce102016cb0b13b1cd485308612b372fb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: c075b8c9ade69d2918f5feea0e9c34bce102016cb0b13b1cd485308612b372fb
SHA3-384 hash: 1a06162304555dcd724d9b3ca99913e53f9e924c00b98d4d3bb74056abf3442612da079bceb37be66bb5ffac88a94bd0
SHA1 hash: 4c6c847a518787a32afdce3247fd3359fb71e6c8
MD5 hash: 2e6942e62be9fc6145bac3d44f48179b
humanhash: eight-twenty-oscar-south
File name:bank slip.zip
Download: download sample
Signature AgentTesla
File size:763'720 bytes
First seen:2021-01-08 13:32:20 UTC
Last seen:2021-01-08 14:45:23 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:1d7CyFDNe8lO1Trh0kFwN5Bj8PMzFU2SqK5LahIYVqIsDzF6jkbGCR9mB5oBw/1/:1d+CDNe8E1vh0kCqPwuj5L2VQzIjYjmJ
TLSH C4F4238908D1CA162E47E8CFC6A65E3057E13CEB14964B568052D31389F7A7BCB2F58F
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence


File Origin
# of uploads :
3
# of downloads :
137
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Tnega
Status:
Malicious
First seen:
2021-01-08 00:57:10 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip c075b8c9ade69d2918f5feea0e9c34bce102016cb0b13b1cd485308612b372fb

(this sample)

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment

Comments