MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cd2db188e26de5fd504756746eaf4a02451352b0a523ea04be5744c4e446d555. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cd2db188e26de5fd504756746eaf4a02451352b0a523ea04be5744c4e446d555
SHA3-384 hash: fe6e73d54e8b4e81e4b8d50fa6611ba319764877e22580b99af83c0b61497372f3a466f9d0c36536cb24c68ffa30ae27
SHA1 hash: f36d8d5b692eb5f54a5e831493508236080af5cc
MD5 hash: 59c0f9a0d23534be86daef83e047d6ee
humanhash: foxtrot-romeo-tennis-football
File name:20210000954460_PDF.gz
Download: download sample
Signature AgentTesla
Create hunting rule
File size:400'732 bytes
First seen:2020-07-14 09:15:56 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:qaqIVIalfZTe+ADUfZRkHNjFuydyfLerTcFt9QrnOenWfxP95+Ry1wUi2BQTcm6k:qaq1an1AUkHJF8fLecy6AWfxzCWEcG
TLSH FD8423BE02E64329E9CCB63D1B546275AB06CFD52299CA47870732E4D8B589D73C0B8D
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27271.Rar5Heur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cd2db188e26de5fd504756746eaf4a02451352b0a523ea04be5744c4e446d555/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-14 09:17:05 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zuw3dchcnxs72uchkz2g5l2kajcrguvquur6ubf6k5cmjzcg2vkq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

gz cd2db188e26de5fd504756746eaf4a02451352b0a523ea04be5744c4e446d555

(this sample)

AgentTesla

Executable exe 33ac409702967bcce5d3be1695caa40e601b10f5d6607a95f83c7a22a1db7d5f

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 33ac409702967bcce5d3be1695caa40e601b10f5d6607a95f83c7a22a1db7d5f
  
Dropping
MD5 73496cdede3bc704053c7fb1a72bdd63

Comments