MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ead0b9435e1e31a621ebe159d3de69099c32a61a21d0934dd6e2c64018db6574. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ead0b9435e1e31a621ebe159d3de69099c32a61a21d0934dd6e2c64018db6574
SHA3-384 hash: 715b5bd8521bb5a478190dd9f45b043021954f20e4a5f983afb757ad9bc6b8b001d6751985707d9d7dd608ff5b65a8cf
SHA1 hash: 152005e41d78be603af284d1fcc365a60a9a9309
MD5 hash: fc5a8f6603b151e71bdfaec77e10a360
humanhash: blossom-carbon-eleven-hydrogen
File name:DHL.zip
Download: download sample
Signature AgentTesla
Create hunting rule
File size:422'520 bytes
First seen:2020-05-12 06:12:27 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:yOYMXTkaJZBNTev/OyghteAqRHr6x/WsdptWynXovvBuB:yONXjjeuyKtq1riDWKovvwB
TLSH 469423F493A55C88FC67AB2D0289D9B5C417C22D60ABB150ED858C8C5D3A8E5F6FF807
Reporter jarumlus
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.ArtemisFC1FDDD27CC7.15887.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 00:15:15 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
2 of 47 (4.26%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5lilsq26dyy2mipl4fm5hxtjbgodfjq2ehijgtow4ldeagg3mv2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

zip ead0b9435e1e31a621ebe159d3de69099c32a61a21d0934dd6e2c64018db6574

(this sample)

AgentTesla

Executable exe 64df39ad1c9796f197681de5ec882e28c40671cb552a7adb5f94b780995965ad

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 64df39ad1c9796f197681de5ec882e28c40671cb552a7adb5f94b780995965ad
  
Dropping
MD5 fc1fddd27cc7169e6dd27b5d2fea9ebe

Comments