7d8a3cc2392ce50d2f75137711acb7358d30157108bfb221c509b0afbab197ec
Classification: Malicious
7d8a3cc2392ce50d2f75137711acb7358d30157108bfb221c509b0afbab197ec is a malicious file sample. Linked to Agent Tesla malware. Detected by 88 antivirus engines.
Detection summary
- 88 antivirus detections
- 1 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 2 DNS requests
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 11:45:06 | 2026-09-02 11:45:06 | malicious-activity | |
| Agent Tesla | ThreatFox Abuse.ch | 2024-07-01 14:34:43 | 2024-07-03 14:23:25 | S0331 Agent Tesla |
Tags
win.agent_tesla agentesla agenttesla negasteal evasiveSample information
- Filenames
- 7d8a3cc2392ce50d2f75137711acb7358d30157108bfb221c509b0afbab197ec
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
61892612c6e00ea0df4b49338aca144f- SHA-1
1a4a08f7cc7b24b3d47baa91a7579c06ffd24d94- SHA-256
7d8a3cc2392ce50d2f75137711acb7358d30157108bfb221c509b0afbab197ec- First indexed
- 2024-07-01 15:19:02
- Last updated
- 2026-09-02 11:45:06
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Jalapeno.1794 |
| APEX | Malicious |
| AVG | Win32:CrypterX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.PowerShell.C5613443 |
| Alibaba | TrojanPSW:MSIL/AgentTesla.b24dd0be |
| Arcabit | Trojan.Jalapeno.D702 |
| Avast | Win32:CrypterX-gen [Trj] |
| Avira | TR/AD.GenSteal.hctgk |
| BitDefender | Gen:Variant.Jalapeno.1794 |
| BitDefenderTheta | Gen:NN.ZemsilF.36808.Rm0@aG5D7ep |
| Bkav | W32.AIDetectMalware.CS |
| ClamAV | Win.Dropper.LokiBot-10028077-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.2c6e00 |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PackedNET.2805 |
| ESET-NOD32 | a variant of MSIL/Kryptik.ALJX |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Jalapeno.1794 (B) |
| F-Secure | Trojan.TR/AD.GenSteal.hctgk |
| FireEye | Generic.mg.61892612c6e00ea0 |
| Fortinet | MSIL/GenKryptik.FQQD!tr |
| GData | Gen:Variant.Jalapeno.1794 |
| Detected | |
| Ikarus | Trojan.MSIL.Inject |
| K7AntiVirus | Trojan ( 005b4a381 ) |
| K7GW | Trojan ( 005b4a381 ) |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| Kingsoft | malware.kb.c.996 |
| Lionic | Trojan.Win32.Agensla.i!c |
| MAX | malware (ai score=81) |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| MaxSecure | Trojan.Malware.74499699.susgen |
| McAfee | Artemis!61892612C6E0 |
| McAfeeD | Real Protect-LS!61892612C6E0 |
| MicroWorld-eScan | Gen:Variant.Jalapeno.1794 |
| Microsoft | Trojan:MSIL/AgentTesla.MBZY |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:XwNirCL0MhXGPG6d6cC4Mw) |
| Sangfor | Trojan.Win32.Save.MSIL_Inject |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.jc |
| Sophos | Troj/Krypt-AGE |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.1408ffc6 |
| Trapmine | malicious.high.ml.score |
| TrendMicro | TrojanSpy.Win32.NEGASTEAL.YXEDPZ |
| TrendMicro-HouseCall | TrojanSpy.Win32.NEGASTEAL.YXEDPZ |
| VBA32 | TrojanLoader.MSIL.DaVinci.Heur |
| VIPRE | Gen:Variant.Jalapeno.1794 |
| Varist | W32/MSIL_Kryptik.KVR.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Zillya | Trojan.Agensla.Win32.30626 |
| ZoneAlarm | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| alibabacloud | Trojan[stealer]:MSIL/Kryptik_AGen.CFJ |
| ALYac | Gen:Variant.Genie.8DN.1302 |
| AVG | Win32:MalwareX-gen [Cryp] |
| Arcabit | Trojan.Genie.8DN.1302 |
| Avast | Win32:MalwareX-gen [Cryp] |
| Avira | HEUR/AGEN.1378496 |
| BitDefender | Gen:Variant.Genie.8DN.1302 |
| CAT-QuickHeal | Trojan.Ghanarava.1731167794ca144f |
| CTX | exe.trojan.msil |
| ESET-NOD32 | MSIL/Kryptik.ALJX trojan |
| Emsisoft | Gen:Variant.Genie.8DN.1302 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1378496 |
| Fortinet | MSIL/Formbook.FQQD!tr |
| GData | Gen:Variant.Genie.8DN.1302 |
| Jiangmin | Trojan.PSW.MSIL.exwi |
| Malwarebytes | Malware.AI.3994906266 |
| McAfeeD | Trojan:Win/AgentTesla.YY |
| MicroWorld-eScan | Gen:Variant.Genie.8DN.1302 |
| Microsoft | Trojan:MSIL/AgentTesla.MBZY!MTB |
| Sangfor | Suspicious.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Trojan.jc |
| Symantec | Trojan.Formbook |
| TrellixENS | Artemis!61892612C6E0 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9t |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | Gen:Variant.Genie.8DN.1302 |
| Varist | W32/MSIL_Kryptik.TA.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| ZoneAlarm | Troj/Krypt-AGE |
| Zoner | Trojan.Win32.171442 |
| alibabacloud | Trojan:MSIL/Agent_AGen.CAJ |
| huorong | TrojanSpy/MSIL.AgentTesla.mq |