8054c765c0425811e3632409c6bbd9149fde1de08593796957ca55ead7e9e683

Classification: Malicious

8054c765c0425811e3632409c6bbd9149fde1de08593796957ca55ead7e9e683 is a malicious file sample. Linked to Agent Tesla malware. Detected by 36 antivirus engines.

Detection summary

  • 36 antivirus detections
  • 1 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 15:45:07 2026-09-02 15:45:07 malicious-activity
Agent Tesla ThreatFox Abuse.ch 2024-06-03 16:05:48 2024-06-05 15:20:19 S0331 Agent Tesla
Generic.Malware MalwareBazaar Abuse.ch 2024-06-03 09:49:52 2024-06-03 09:49:52 malicious-activity

Tags

win.agent_tesla agentesla agenttesla negasteal evasive infostealer

Sample information

Filenames
8054c765c0425811e3632409c6bbd9149fde1de08593796957ca55ead7e9e683, document.exe
File type
application/x-dosexec
MD5
bb277f03c2e761e03643369ef4d9f1da
SHA-1
8f44aa9566f9da9c7086d6da8f080c7a7de52050
SHA-256
8054c765c0425811e3632409c6bbd9149fde1de08593796957ca55ead7e9e683
First indexed
2024-06-03 10:20:08
Last updated
2026-09-02 15:45:07

Antivirus detections

EngineDetection
APEXMalicious
AVGPWSX-gen [Trj]
AlibabaTrojan:MSIL/GenKryptik.3f0e31a3
AvastPWSX-gen [Trj]
AviraHEUR/AGEN.1323935
BitDefenderThetaGen:NN.ZemsilF.36806.Qm0@aChxqTo
BkavW32.AIDetectMalware.CS
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
ESET-NOD32a variant of MSIL/GenKryptik.GXRS
Elasticmalicious (high confidence)
F-SecureHeuristic.HEUR/AGEN.1323935
FireEyeGeneric.mg.bb277f03c2e761e0
FortinetMSIL/Kryptik.AGUH!tr
GoogleDetected
IkarusTrojan.MSIL.Agent
KasperskyUDS:Trojan.MSIL.Taskun.gen
Kingsoftmalware.kb.c.995
LionicTrojan.Win32.Taskun.4!c
MalwarebytesMachineLearning/Anomalous.95%
MaxSecureTrojan.Malware.300983.susgen
McAfeeArtemis!BB277F03C2E7
McAfeeDti!8054C765C042
MicrosoftTrojan:Win32/Phonzy.B!ml
RisingMalware.Obfus/[email protected] (RDM.MSIL2:tqUJACEyPQ6txAN8dGnhmg)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.jc
SophosTroj/MSIL-SSP
SymantecScr.Malcode!gdn33
Trapminemalicious.high.ml.score
VaristW32/MSIL_Kryptik.DWR.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
ZoneAlarmUDS:Trojan.MSIL.Taskun.gen
alibabacloudTrojan:MSIL/GenKryptik.GDYH
tehtrisGeneric.Malware

Network contacts

104.26.12.205

DNS requests

api.ipify.org