MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 ca6c766e7ef0679e544ecfec0dec285050838809855561ab5e84d48a9d419ebc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AgentTesla
Vendor detections: 2
| SHA256 hash: | ca6c766e7ef0679e544ecfec0dec285050838809855561ab5e84d48a9d419ebc |
|---|---|
| SHA3-384 hash: | 499401de3876c7d18d558f43f1039f74d2764ce53c871bff204dfaa1820ec82e46d3bf53bec08cda2de0421ea63e1caa |
| SHA1 hash: | fd90e1247af7d0dbe366817c4b1af7bdf6a04a7f |
| MD5 hash: | bcff08001708c09e8f0e1982b80b3e97 |
| humanhash: | sixteen-nuts-fix-lion |
| File name: | DRAFT BL (2).lzh |
| Download: | download sample |
| Signature | AgentTesla |
| File size: | 782'286 bytes |
| First seen: | 2020-11-17 12:03:32 UTC |
| Last seen: | Never |
| File type: | lzh |
| MIME type: | application/x-lzh-compressed |
| ssdeep | 12288:Xv1JR53+btmnhvjAHcjVhm29MML9ThsK0MBxNmlrmy1vcetmCl2JTjlIkwNQIxX0:XzWtmhvj0cjVhm2C491uMBx8dmCcJTj3 |
| TLSH | 81F4239738E097EAC3B1C23E82AEB16495E8634E66462B1EC75C69527C09F04F53F731 |
| Reporter |  GovCERT_CH |
Intelligence
File Origin
# of uploads :
1
# of downloads :
43
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-11-17 12:06:37 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.