TF-1859928
high
📛 Threat Title
AgendaCrypt: MD5 hash of a malware sample (payload) e5e3819b4c354a3416a0d1c9f483aa79
Description
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: AgendaCrypt (aliases: Agenda,Qilin). Confidence: 75. First seen: 2026-07-27 05:12:22 UTC. Reporter: TheRavenFile. Tags: agenda, qilin.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_md5
e5e3819b4c354a3416a0d1c9f483aa79
IOC database
- Type
- hash_md5
- Value
e5e3819b4c354a3416a0d1c9f483aa79- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- MD5 hash of a malware sample (payload) attributed to AgendaCrypt
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (3)
- External reference ThreatFox IOCs
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: AgendaCrypt (aliases: Agenda,Qilin). Confidence: 75. First seen: 2026-07-27 05:12:22 UTC. Reporter: TheRavenFile. Tags: agenda, qilin.
Remediations (10)
-
web:cipherssecurity.com
Check MD5 , SHA-1, or SHA-256 file hashes against MalwareBazaar and VirusTotal feeds. Drop a file — hashing happens in your browser, never uploaded.
-
web:github.com
A .txt file containing the MD5 hashes for malware gathered from multiple sources, perfect if you want to build your own antivirus and need a list of signatures to get started.
-
web:hashes.com
Decrypt and crack your MD5 , SHA1, SHA256, MySQL, MD5 Email, SHA256 Email, and NTLM hashes for free online. We also support Bcrypt, SHA512, Wordpress and many more.
-
web:inventivehq.com
Free file hash checker & malicious hash lookup. Drag-drop a file to hash it in your browser, or bulk-check MD5 /SHA-1/SHA-256 hashes against malware databases — VirusTotal & MalwareBazaar links included.
-
web:ismalicious.com
Database of known malware file hashes. MD5 , SHA1, and SHA256 hashes with malware family classification. Updated daily from sandbox analysis and vendor feeds.
-
web:ismalicious.com
194 indicators (0 domains, 0 IPs, 0 URLs, 194 hashes) attributed to the AgendaCrypt malware family.
-
web:threatfox.abuse.ch
AgendaCrypt IOC: e5e3819b4c354a3416a0d1c9f483aa79 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash e5e3819b4c354a3416a0d1c9f483aa79 .
-
web:threatfox.abuse.ch
AgendaCrypt IOC: eb6fff4ee0f03ae5191f11570ff221c5 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash eb6fff4ee0f03ae5191f11570ff221c5.
-
web:virusshare.com
Below are links to lists of MD5 hashes for all the malware samples contained in each of the zip files shared via the torrents. Each list is published after each torrent is uploaded. Each list is a plain text file with one hash per line. Files 0-148 are 4.3 MB in size with 131,072 hashes each.
-
web:www.virustotal.com
where we'll show you how to transform raw intelligence into a dynamic, actionable defense strategy. We'll start with a real-world scenario from Google Threat Intelligence. You'll see a step-by-step process demonstrating how Gemini-powered agents quickly build a robust threat model, automate the hunt sequence, and operationalize the entire workflow.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.