a076938fa168d283115525aebeb972f8eba151566a82e06503c23e0d95c4dffa

Classification: Malicious

a076938fa168d283115525aebeb972f8eba151566a82e06503c23e0d95c4dffa is an exploit. Detected by 28 antivirus engines. Linked to Agent Tesla malware.

Detection summary

  • 28 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Agent Tesla ThreatFox Abuse.ch 2022-08-29 16:22:44 2022-08-31 16:18:55 S0331 Agent Tesla

Tags

win.agent_tesla agentesla agenttesla negasteal

Sample information

SHA-256
a076938fa168d283115525aebeb972f8eba151566a82e06503c23e0d95c4dffa
First indexed
2022-08-29 17:18:34
Last updated
2026-10-17 11:04:24

Antivirus detections

EngineDetection
MicroWorld-eScanExploit.RTF-ObfsStrm.Gen
FireEyeExploit.RTF-ObfsStrm.Gen
McAfeeExploit-GDA!656D54109D98
K7AntiVirusTrojan ( 0057b3a91 )
K7GWTrojan ( 0057b3a91 )
CyrenRTF/CVE-2017-11882.R.gen!Camelot
SymantecBloodhound.RTF.20
ESET-NOD32Win32/Exploit.CVE-2017-11882.BQF
KasperskyHEUR:Exploit.MSOffice.Generic
BitDefenderExploit.RTF-ObfsStrm.Gen
NANO-AntivirusExploit.Rtf.Heuristic-rtf.dinbqn
CynetMalicious (score: 99)
Ad-AwareExploit.RTF-ObfsStrm.Gen
EmsisoftExploit.RTF-ObfsStrm.Gen (B)
DrWebExploit.CVE-2018-0798.4
VIPREExploit.RTF-ObfsStrm.Gen
TrendMicroHEUR_RTFMALFORM
McAfee-GW-EditionExploit-GDA!656D54109D98
GDataExploit.RTF-ObfsStrm.Gen
AviraHEUR/Rtf.Malformed
ArcabitExploit.RTF-ObfsStrm.Gen
ZoneAlarmHEUR:Exploit.MSOffice.CVE-2018-0802.gen
MicrosoftTrojan:Script/Sabsik.FL.B!ml
GoogleDetected
AhnLab-V3RTF/Malform-A.Gen
MAXmalware (ai score=85)
ZonerProbably Heur.RTFBadHeader
IkarusExploit.CVE-2017-11882