MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e2b982e6aed9e786f3ffdd763ab95d2e74ff74edc51f8ae821aacae992a10704. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e2b982e6aed9e786f3ffdd763ab95d2e74ff74edc51f8ae821aacae992a10704
SHA3-384 hash: 28cac0655e6497ab64926459f52dcc30375e521f4bcdd34fbe558dfb004422ea4b51de03b05d4cb4e972984d46b41fe8
SHA1 hash: d6c3ff355c205774c646e2cac9e8d5bb96465fb9
MD5 hash: 20072b66f4ddde3d15294f1090667734
humanhash: cold-grey-oxygen-neptune
File name:shipping Documents.pdf.z
Download: download sample
Signature AgentTesla
Create hunting rule
File size:374'842 bytes
First seen:2020-07-12 02:42:45 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:PYOdPgggI5iOEvTIL1K3LAO0St8w6uL0s+sduIe2TLJNLaL79klzpqheM2SgciB/:gycwQUbfSvjGc3VLJN09kzqhMciBu4
TLSH 908423848A16B0B4BAE244DECF2C4494FD65A41A0300FB53646FCBCFED2366E7DC6566
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e2b982e6aed9e786f3ffdd763ab95d2e74ff74edc51f8ae821aacae992a10704/
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Create hunting rule
Status:
Malicious
First seen:
2020-07-12 02:44:06 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=4k4yfzvo3htyn4773v3dvok5fz2p65hnyupyv2bbvlfotevba4ca._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

z e2b982e6aed9e786f3ffdd763ab95d2e74ff74edc51f8ae821aacae992a10704

(this sample)

AgentTesla

Executable exe edc0c4b6e59c6ace0fa712c35715fc2d9cb2b0167c175e515bd971b3a52e530b

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 edc0c4b6e59c6ace0fa712c35715fc2d9cb2b0167c175e515bd971b3a52e530b
  
Dropping
MD5 3d8a257d88d5942edddd4f1da97a7cf7

Comments