MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e826d0a1af288766986fcb176a53815df083d583932b5da670b9c9494235fda0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 2 File information 2 Yara Comments

SHA256 hash: e826d0a1af288766986fcb176a53815df083d583932b5da670b9c9494235fda0
SHA3-384 hash: 7d48287d7191fd252202097c817dce35c062d17525e5538b05d08fa5e50d6f6aa1ba46a49a66f6c5b7a134f7e76cc5e8
SHA1 hash: 001348ca54292f8222c1f3fef10b93f0ffe2e54d
MD5 hash: 8a1d57de84d6f5f4c9574f02f83f7fd7
humanhash: tango-solar-iowa-india
File name:Purchase Order - DRR 30-06-2020.pdf.001
Download: download sample
Signature AgentTesla
File size:373'634 bytes
First seen:2020-06-30 15:54:34 UTC
Last seen:2020-06-30 17:27:19 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:c5ROwawOXPyWun2nIrVpxjlI/7Xswr266zVvHp4dq4B7EgKwevQwWIAE+w1:c5RM1X6Wu2nYbtli7Xs8YVvHOqaQgKzj
TLSH 228423639F5ADDD2AA619C00A1BC677816A6441640E5F3C01B0A7A7FECCED9DFCCD218
Reporter @jarumlus


Mail intelligence
Trap location Impact
CH Switzerland Low
Global High
# of uploads 2
# of downloads 33
Origin country FR FR
ClamAV No detection
CERT.PL MWDB Detection:n/a
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Agensla
First seen:2020-06-30 07:55:23 UTC
AV detection:19 of 48 (39.58%)
Threat level:   2/5
Spamhaus Hash Blocklist :Suspicious file
VirusTotal:Virustotal results 27.12%

File information

The table below shows additional information about this malware sample such as delivery method and external references.



rar e826d0a1af288766986fcb176a53815df083d583932b5da670b9c9494235fda0

(this sample)

Dropped by
Delivery method
Distributed via e-mail attachment