MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dc032be1c81bf6149441b83be4bc12b8cef20255ec60f49e5778968c8004674c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AgentTesla


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments

SHA256 hash: dc032be1c81bf6149441b83be4bc12b8cef20255ec60f49e5778968c8004674c
SHA3-384 hash: 6316c39a20ae92bed9eae9341e23c0a84dac0058c6e75fbe2f8b15e4400c9303180f2d580ddd2560ba9318ca6b77ea1b
SHA1 hash: 43b909b48ba1693c7989ee6074db348e93361c93
MD5 hash: 2ba010febe853d2633d04a36b12b4c65
humanhash: ceiling-one-mississippi-nevada
File name:6ruXkfgh.html
Download: download sample
Signature AgentTesla
File size:47'977 bytes
First seen:2025-01-09 18:24:05 UTC
Last seen:Never
File type: html
MIME type:text/html
ssdeep 384:gLezlvdbmgM8m956YSmzBB5CtbHA7lvRvt:gOlvBvm956YfwTARZ1
Threatray 3'540 similar samples on MalwareBazaar
TLSH T14F23CE7B9442E09BA5278BBFFDEC2C6116015C77ADF86F4961F8800F3AFC5C66124989
Magika javascript
Reporter Anonymous
Tags:AgentTesla html

Intelligence


File Origin
# of uploads :
1
# of downloads :
176
Origin country :
US US
Vendor Threat Intelligence
Verdict:
Malicious
Score:
70%
Tags:
infosteal spawn sage
Result
Verdict:
UNKNOWN
Result
Threat name:
n/a
Detection:
malicious
Classification:
phis
Score:
72 / 100
Signature
AI detected suspicious Javascript
Detected javascript redirector / loader
HTML page contains obfuscated javascript
HTML sample is only containing javascript code
HTML Script injector detected
Suspicious Javascript code found in HTML file
Yara detected obfuscated html page
Behaviour
Behavior Graph:
Threat name:
Win32.Phishing.Generic
Status:
Malicious
First seen:
2025-01-09 18:25:05 UTC
File Type:
Text (HTML)
Extracted files:
1
AV detection:
3 of 38 (7.89%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments