MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 3 Yara Comments

SHA256 hash: db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d
SHA3-384 hash: b83207aab1e7fb216638c7ed7a8ee5a6d8f15aef62c6e6855dc0b0dae2be1b75992e78937e4d5d3ce76037a658c044cd
SHA1 hash: 2de91a11a083b8d1dace17dc3951e67ea4044ab8
MD5 hash: f5ff7abf14a837ac10a388c514bbbcac
humanhash: eight-east-bakerloo-montana
File name:INVOICE copy.pdf.z
Download: download sample
Signature AgentTesla
File size:395'181 bytes
First seen:2020-06-30 10:13:36 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:fnuabOxd7wzwJ+KNGSTltW14AmuPgSrMrZo7TlbnFnb9676nrWplTMCtdyBovhki:2UqdcHkT0pPkWlTRVUt89o
TLSH 89842365FBDB434B4BBAFC00A4BA52610AFF60456A26ACFF8F04E9055CE4B551B73138
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
Global High
# of uploads 1
# of downloads 24
Origin country FR FR
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:Win32.Trojan.Adload
First seen:2020-06-30 09:18:03 UTC
AV detection:20 of 48 (41.67%)
Threat level:   2/5
Spamhaus Hash Blocklist :Malicious file
VirusTotal:Virustotal results 35.48%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



z db64a6808e3c0111147ba726dda558f64eb9d28dc0e8059424ffaaf7d3ef755d

(this sample)

Delivery method
Distributed via e-mail attachment