MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cd11bd96cae9f87342c30ce4a2cb6cdeb9cb5c46c5c155435337cf015b4b16a1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cd11bd96cae9f87342c30ce4a2cb6cdeb9cb5c46c5c155435337cf015b4b16a1
SHA3-384 hash: f44d49ed838b41be8a8807e484d4ef516fc543a574457e10316ef2f92f607e9999ad947a6595a9fc9c4a1ddca2450b83
SHA1 hash: 4cc47c28b6f0c0298a3eb520b811ecd72bbad54f
MD5 hash: c89019596a6d374b5fa59f62a4e2cb4e
humanhash: hotel-potato-lion-august
File name:DHL_document1102202068090891.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:983'465 bytes
First seen:2021-03-09 07:06:05 UTC
Last seen:2021-03-09 23:10:42 UTC
File type: zip
MIME type:application/zip
ssdeep 24576:AQovJAY8lSg4pOTLORMbbx740APtc9aU7Su2/IdUf:A5vJ4c7pOTLORK740OuQU7uUUf
TLSH 902533EB9B8ACE1DA9E319328C437540962EE8ECBF3CF145D660468458C567323B71F6
Reporter lowmal3

Intelligence

File Origin
# of uploads :
3
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.36473931.6947.6838.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2021-03-09 07:07:06 UTC
AV detection:
14 of 47 (29.79%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zui33fwk5h4hgqwdbtskfs3m3244wxcgyxavkq2tg7hqcw2lc2qq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.65
Link:
https://yomi.yoroi.company/submissions/cd11bd96cae9f87342c30ce4a2cb6cdeb9cb5c46c5c155435337cf015b4b16a1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip cd11bd96cae9f87342c30ce4a2cb6cdeb9cb5c46c5c155435337cf015b4b16a1

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments