PO 20213009.exe
Classification: Malicious
PO 20213009.exe is a malicious file sample (application/x-dosexec). Detected by 23 antivirus engines. Linked to Agent Tesla malware.
Detection summary
- 23 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | Abuse.ch | 2021-09-30 11:17:31 | 2021-09-30 11:17:31 | malicious-activity | |
| AgentTesla | Abuse.ch | 2021-09-30 11:17:31 | 2021-09-30 11:17:31 | malicious-activity | S0331 Agent Tesla |
Sample information
- Filenames
- PO 20213009.exe
- File type
- application/x-dosexec
- MD5
70648d81b607d04b2bd98b42eb3260b2- SHA-1
259d66fee91160fca78a7429e113ae347a5ec8e0- SHA-256
7e6b0300a0753ef176e71d4001da7698fc232cce4e322d71f6c89a1038b1f8cd- First indexed
- 2021-09-30 12:15:06
- Last updated
- 2026-08-24 07:14:35
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.MSIL.Agensla.i!c |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.70648d81b607d04b |
| McAfee | Artemis!70648D81B607 |
| Cylance | Unsafe |
| Sangfor | Suspicious.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (W) |
| BitDefenderTheta | Gen:NN.ZemsilF.34170.Rm0@aagejOk |
| Symantec | Scr.Malcode!gdn30 |
| ESET-NOD32 | a variant of MSIL/Kryptik.ACZA |
| APEX | Malicious |
| Paloalto | generic.ml |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| Sophos | Mal/Generic-S |
| McAfee-GW-Edition | BehavesLike.Win32.Fareit.jc |
| Ikarus | Trojan-Spy.Keylogger.AgentTesla |
| Kingsoft | Win32.PSWTroj.Undef.(kcloud) |
| Microsoft | Trojan:Win32/AgentTesla!ml |
| Cynet | Malicious (score: 100) |
| Malwarebytes | MachineLearning/Anomalous.95% |
| SentinelOne | Static AI - Malicious PE |
| Fortinet | Malicious_Behavior.SB |
| Cybereason | malicious.ee9116 |