MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 de8db768b81cb8e96d25a853590887cc635f442d6b29418f42fc9a4f11b4e764. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: de8db768b81cb8e96d25a853590887cc635f442d6b29418f42fc9a4f11b4e764
SHA3-384 hash: ecd3ebd04799cefb32eee737a1893d57233311e0e1f4c9ce83f1d1f2442c753e4af25b7554ec5238f7c1d4a1cadeff9a
SHA1 hash: b2a9ce0e4b43fbb25c507cbfa33d8879e8572b79
MD5 hash: b7b88a7945925f27b960fff52263ae44
humanhash: lima-oven-tango-fourteen
File name:Invoice.xls.rar
Download: download sample
Signature AgentTesla
Create hunting rule
File size:522'675 bytes
First seen:2020-07-08 05:10:12 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:zOWrLAO9m2zPwt/XAQibk0m10pSIVLK4bH0Vby723QADxN:SWxm2zPZtbN7kqLNLgO723Q4v
TLSH B0B4232DAC38745F5955A4DE09EB4FA89947FDB794AA20F0F013264252CA7E1EDC0D0B
Reporter cocaman
Tags:AgentTesla rar


Avatar
cocaman
Malicious email
From: Chris Ngai <chris.ngai@mcphk.com>
Received: from mcphk.com (unknown [185.222.58.152])
Date: 08 Jul 2020 05:23:58 +0200
Subject: None
Attachment: Invoice.xls.rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/de8db768b81cb8e96d25a853590887cc635f442d6b29418f42fc9a4f11b4e764/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-08 05:12:06 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=32g3o2fyds4os3jfvbjvscehzrrv6rbnnmuudd2c7sne6enu45sa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

rar de8db768b81cb8e96d25a853590887cc635f442d6b29418f42fc9a4f11b4e764

(this sample)

AgentTesla

Executable exe b07c6566cc19305d6a2e0a85bd12efc3bd556bd0a4ba740484392a93980606eb

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b07c6566cc19305d6a2e0a85bd12efc3bd556bd0a4ba740484392a93980606eb
  
Dropping
AgentTesla

Comments