MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d134fc4cd41df64a1aaf5f1498463888cd6ed8e9a13ba5dfaee5a42f61726d0e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d134fc4cd41df64a1aaf5f1498463888cd6ed8e9a13ba5dfaee5a42f61726d0e
SHA3-384 hash: 84af2fbb09f5205ad72a4d91408b6b8a54d5cafc35fbc302e6590ef514950f6fc88961fc5c9addce80636c40316044fe
SHA1 hash: 71f1961963b98a67f387859c64d34f2b93fa7f3f
MD5 hash: 6b56e3c2fab64a44d14e3803977264be
humanhash: cardinal-mockingbird-king-pizza
File name:ORDER# 016817 Formal Invoice.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:481'975 bytes
First seen:2020-07-27 21:36:39 UTC
Last seen:2020-07-28 09:54:37 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:OyEecJNkcCwJknZAsgvlDQn3sYlDUximen7w1B4:iDJNkXnZdclGoiZn+B4
TLSH C9A423CFBD796178B9AA91E5015E0F0DA8231371D083D1707C2AA1DEB6969F3B8734C6
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27502.Rar5Heur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d134fc4cd41df64a1aaf5f1498463888cd6ed8e9a13ba5dfaee5a42f61726d0e/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-27 12:05:09 UTC
AV detection:
21 of 29 (72.41%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=2e2pytgudx3eugvpl4kjqrryrdgw5whjue52lx5o4wsc6ylsnuha._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/d134fc4cd41df64a1aaf5f1498463888cd6ed8e9a13ba5dfaee5a42f61726d0e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar d134fc4cd41df64a1aaf5f1498463888cd6ed8e9a13ba5dfaee5a42f61726d0e

(this sample)

AgentTesla

Executable exe 44301664a4fb5c224f1b6f29a6fb87496874599032c8ec0f093f9a4be5b94612

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 44301664a4fb5c224f1b6f29a6fb87496874599032c8ec0f093f9a4be5b94612
  
Dropping
MD5 6d0107457500e7cdcc1fd9fafc72310d

Comments