MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 16


Intelligence 16 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170
SHA3-384 hash: 01e2f141d615f12785197530d47eab0a1204710c405777a937a3c9d9f700845b93f92eeded838b0aaf976eb64695adf8
SHA1 hash: dae541d4c4c3ecf79e877a77af0484a320003317
MD5 hash: 0f6ad09370a0a54d4810068c13fa19be
humanhash: yellow-rugby-cat-stream
File name:VIET_DQRE PJT_RFQ&Spec_REV A_HEC_180117.exe
Download: download sample
Signature AgentTesla
Create hunting rule
File size:918'528 bytes
First seen:2023-06-26 08:02:06 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'204 x SnakeKeylogger)
ssdeep 24576:zQYqtm8OqKLAdHrjkxSJLxE1/o1vq/JlmzSv:0+8OhsryKENoF0OzS
Threatray 5'451 similar samples on MalwareBazaar
TLSH T1EA15F02476B90F56E57997F94442B23117BAAA67383ED7094EC3F4CB1AA2F410E41F23
TrID 71.1% (.EXE) Generic CIL Executable (.NET, Mono, etc.) (73123/4/13)
10.2% (.EXE) Win64 Executable (generic) (10523/12/4)
6.3% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2)
4.3% (.EXE) Win32 Executable (generic) (4505/5/1)
2.0% (.ICL) Windows Icons Library (generic) (2059/9)
Reporter adrian__luca
Tags:AgentTesla exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
284
Origin country :
HU HU
Vendor Threat Intelligence
Malware family:
agenttesla
Create hunting rule
ID:
1
File name:
VIET_DQRE PJT_RFQ&Spec_REV A_HEC_180117.exe
Verdict:
Malicious activity
Analysis date:
2023-06-26 08:08:08 UTC
Tags:
agenttesla
Link:
https://app.any.run/tasks/f82b8336-0869-4e48-98de-6f3b0a212d98

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/402823/
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.67618869.9689.32143.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Unauthorized injection to a recently created process
Creating a file
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
barys comodo lokibot packed
Link:
https://www.filescan.io/uploads/6499463704bae722a2dcb2eb/reports/3cc38d8e-6f1e-445b-a384-007c3da440d9/overview
Verdict:
Malicious
Labled as:
Trojan.Generic
Link:
https://www.hybrid-analysis.com/sample/ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Agent Tesla
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/606f7385-ada9-4c2f-b48a-297ff95cf837
Result
Threat name:
AgentTesla
Create hunting rule
Detection:
malicious
Classification:
troj.spyw.evad
Score:
100 / 100
Link:
https://www.joesandbox.com/analysis/1261314
Signature
.NET source code contains potential unpacker
Found malware configuration
Injects a PE file into a foreign processes
Installs a global keyboard hook
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)
Sample uses string decryption to hide its real strings
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)
Tries to steal Mail credentials (via file / registry access)
Yara detected AgentTesla
Behaviour
Behavior Graph:
Download SVG
Detection:
agenttesla
Create hunting rule
Link:
https://mwdb.cert.pl/sample/ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2023-06-19 07:47:02 UTC
File Type:
PE (.Net Exe)
Extracted files:
28
AV detection:
24 of 37 (64.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5yhcutfoyph5tb4jgf35smfgxkowdit3tzfajvqwtux6bn4xyfya._file
Verdict:
malicious
Label(s):
agenttesla
Create hunting rule
Similar samples:
1f1987c42f73ffac95703d0f7c9445819e46f1471eb6049a51b66e0c7e730804
AgentTesla
3884e567629d6433ebefa10b2e6d53a27f7b19c9d2e1c4ca7126fc4ceeda230f
AgentTesla
39893af7f960c76c20ab2b99e5caa2acabab3c7fc01e47791586f451eba5be5b
AgentTesla
3d0816e876a59f4e3b56bd2105122ef69499f79bab375b0956716494eb286dbd
AgentTesla
3d9b67b5dc857a2663548b9335d48dde0a880f6b61490f0cced767399a166f2b
AgentTesla
545a4e3b7985223b2edb4f9a3a776d0c6cba118ebce4a22de8c0c07c6b67d2cf
AgentTesla
82e5621ef317c7895d35697136aba7ac7f91d39ad89570da1946c06df5308c59
AgentTesla
868c32e8f0d323bf24fbb9c6d073198cdb50a072905ba1f43f3725dceac6863d
AgentTesla
daf433d661a76fcc59f07b197f43ae9ff2f26f85c3b18b8feb4c6460432ff693
AgentTesla
f2927830e4233d9249db711122cafe8f85bf91afa44409b63aacf64b28176356
AgentTesla
+ 5'441 additional samples on MalwareBazaar
Result
Malware family:
agenttesla
Create hunting rule
Score:
  10/10
Tags:
family:agenttesla collection keylogger spyware stealer trojan
Link:
https://tria.ge/reports/230626-jxpg6aha49/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
outlook_office_path
outlook_win_path
Suspicious use of SetThreadContext
Accesses Microsoft Outlook profiles
Reads data files stored by FTP clients
Reads user/profile data of local email clients
Reads user/profile data of web browsers
AgentTesla
Unpacked files
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
2e9f13f188764f1c1716f2de925880fea23080b562540891d32d58d43c32e86f
MD5 hash:
c84b67fa2c4066b8c2d2f3dc060ab756
SHA1 hash:
d3281eed13a4c618cfbec8502eeb4bb31c1b52c4
Detections:
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
d2ebd3a6d8d4851e929ace6451b49e57113dd84f2d60c293f6e79b94a42183d4
MD5 hash:
02619cb58a6d438fde337cc313ca6db5
SHA1 hash:
cf7ce53022c1128d54ec45db8dba3d59f42a5137
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
4b6aba6cef1268a596566cb04a338c8cbded8780b44ed7d3a11a4c2818b6f4e9
MD5 hash:
a05d65fce5c37f5474b2c707e6132005
SHA1 hash:
b08e703b616b5c340c1f19f3b21c1df55aa2eb93
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
f618ac82e21f502ce8124ec11495c60d0109e8bfe812e1a044f3862ee6eb4a76
MD5 hash:
3e04c4e3de8fd5c712d36832ed296d2e
SHA1 hash:
82018954af9d1ea8a70346fc681a2aaaf9e76e57
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
2e9f13f188764f1c1716f2de925880fea23080b562540891d32d58d43c32e86f
MD5 hash:
c84b67fa2c4066b8c2d2f3dc060ab756
SHA1 hash:
d3281eed13a4c618cfbec8502eeb4bb31c1b52c4
Detections:
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
d2ebd3a6d8d4851e929ace6451b49e57113dd84f2d60c293f6e79b94a42183d4
MD5 hash:
02619cb58a6d438fde337cc313ca6db5
SHA1 hash:
cf7ce53022c1128d54ec45db8dba3d59f42a5137
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
4b6aba6cef1268a596566cb04a338c8cbded8780b44ed7d3a11a4c2818b6f4e9
MD5 hash:
a05d65fce5c37f5474b2c707e6132005
SHA1 hash:
b08e703b616b5c340c1f19f3b21c1df55aa2eb93
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
f618ac82e21f502ce8124ec11495c60d0109e8bfe812e1a044f3862ee6eb4a76
MD5 hash:
3e04c4e3de8fd5c712d36832ed296d2e
SHA1 hash:
82018954af9d1ea8a70346fc681a2aaaf9e76e57
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
2e9f13f188764f1c1716f2de925880fea23080b562540891d32d58d43c32e86f
MD5 hash:
c84b67fa2c4066b8c2d2f3dc060ab756
SHA1 hash:
d3281eed13a4c618cfbec8502eeb4bb31c1b52c4
Detections:
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
d2ebd3a6d8d4851e929ace6451b49e57113dd84f2d60c293f6e79b94a42183d4
MD5 hash:
02619cb58a6d438fde337cc313ca6db5
SHA1 hash:
cf7ce53022c1128d54ec45db8dba3d59f42a5137
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
4b6aba6cef1268a596566cb04a338c8cbded8780b44ed7d3a11a4c2818b6f4e9
MD5 hash:
a05d65fce5c37f5474b2c707e6132005
SHA1 hash:
b08e703b616b5c340c1f19f3b21c1df55aa2eb93
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
f618ac82e21f502ce8124ec11495c60d0109e8bfe812e1a044f3862ee6eb4a76
MD5 hash:
3e04c4e3de8fd5c712d36832ed296d2e
SHA1 hash:
82018954af9d1ea8a70346fc681a2aaaf9e76e57
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
2e9f13f188764f1c1716f2de925880fea23080b562540891d32d58d43c32e86f
MD5 hash:
c84b67fa2c4066b8c2d2f3dc060ab756
SHA1 hash:
d3281eed13a4c618cfbec8502eeb4bb31c1b52c4
Detections:
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
2e9f13f188764f1c1716f2de925880fea23080b562540891d32d58d43c32e86f
MD5 hash:
c84b67fa2c4066b8c2d2f3dc060ab756
SHA1 hash:
d3281eed13a4c618cfbec8502eeb4bb31c1b52c4
Detections:
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
AgentTeslaXorStringsNet
Create hunting rule
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
d2ebd3a6d8d4851e929ace6451b49e57113dd84f2d60c293f6e79b94a42183d4
MD5 hash:
02619cb58a6d438fde337cc313ca6db5
SHA1 hash:
cf7ce53022c1128d54ec45db8dba3d59f42a5137
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
4b6aba6cef1268a596566cb04a338c8cbded8780b44ed7d3a11a4c2818b6f4e9
MD5 hash:
a05d65fce5c37f5474b2c707e6132005
SHA1 hash:
b08e703b616b5c340c1f19f3b21c1df55aa2eb93
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
d2ebd3a6d8d4851e929ace6451b49e57113dd84f2d60c293f6e79b94a42183d4
MD5 hash:
02619cb58a6d438fde337cc313ca6db5
SHA1 hash:
cf7ce53022c1128d54ec45db8dba3d59f42a5137
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
f618ac82e21f502ce8124ec11495c60d0109e8bfe812e1a044f3862ee6eb4a76
MD5 hash:
3e04c4e3de8fd5c712d36832ed296d2e
SHA1 hash:
82018954af9d1ea8a70346fc681a2aaaf9e76e57
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
4b6aba6cef1268a596566cb04a338c8cbded8780b44ed7d3a11a4c2818b6f4e9
MD5 hash:
a05d65fce5c37f5474b2c707e6132005
SHA1 hash:
b08e703b616b5c340c1f19f3b21c1df55aa2eb93
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
f618ac82e21f502ce8124ec11495c60d0109e8bfe812e1a044f3862ee6eb4a76
MD5 hash:
3e04c4e3de8fd5c712d36832ed296d2e
SHA1 hash:
82018954af9d1ea8a70346fc681a2aaaf9e76e57
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
SH256 hash:
ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170
MD5 hash:
0f6ad09370a0a54d4810068c13fa19be
SHA1 hash:
dae541d4c4c3ecf79e877a77af0484a320003317
Link:
https://www.unpac.me/results/292c43e5-101d-4e7f-b91f-93040d54d073/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:pe_imphash
Create hunting rule
Rule name:Skystars_Malware_Imphash
Create hunting rule
Author:Skystars LightDefender
Description:imphash

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

Executable exe ee0e2a4caec3cfd987893177d930a6ba9d61a27b9e4a04d6169d2fe0b797c170

(this sample)

  
Delivery method
Distributed via e-mail attachment
Cape
Cape
https://www.capesandbox.com/analysis/402823/

Comments