TF-1859922
high
📛 Threat Title
AgendaCrypt: MD5 hash of a malware sample (payload) 1340bdf97aaefa2fd6dc586f84cf4f15
Description
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: AgendaCrypt (aliases: Agenda,Qilin). Confidence: 75. First seen: 2026-07-27 05:12:21 UTC. Reporter: TheRavenFile. Tags: agenda, qilin.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_md5
1340bdf97aaefa2fd6dc586f84cf4f15
IOC database
- Type
- hash_md5
- Value
1340bdf97aaefa2fd6dc586f84cf4f15- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- MD5 hash of a malware sample (payload) attributed to AgendaCrypt
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (3)
- External reference ThreatFox IOCs
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a malware sample (payload). IOC type: MD5 hash of a malware sample (payload). Attributed malware: AgendaCrypt (aliases: Agenda,Qilin). Confidence: 75. First seen: 2026-07-27 05:12:21 UTC. Reporter: TheRavenFile. Tags: agenda, qilin.
Remediations (10)
-
web:cipherssecurity.com
Check MD5 , SHA-1, or SHA-256 file hashes against MalwareBazaar and VirusTotal feeds. Drop a file — hashing happens in your browser, never uploaded.
-
web:github.com
Malware - Hash -Database aims to provide a centralized collection of malware hashes for use in cybersecurity research, threat intelligence, and digital forensics. By maintaining a diverse set of hash types and regularly updating the repository, we aim to support professionals in identifying and analyzing malware threats effectively.
-
web:inventivehq.com
Free file hash checker & malicious hash lookup. Drag-drop a file to hash it in your browser, or bulk-check MD5 /SHA-1/SHA-256 hashes against malware databases — VirusTotal & MalwareBazaar links included.
-
web:malpedia.caad.fkie.fraunhofer.de
Qilin ransomware has been active since at least 2022. Both Golang and Rustlang samples have been observed in use. Qilin is known to operate with a Ransomwareas-a-Service (Raas) model, with double extortion (decrypter + non-release of data) tactics observed.
-
web:threatfox.abuse.ch
AgendaCrypt IOC: deba77ce237a412331cda6c87cf62cdc ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash deba77ce237a412331cda6c87cf62cdc.
-
web:threatfox.abuse.ch
AgendaCrypt IOC: 9394e505be0e7a274cd7431abd53aef1 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 9394e505be0e7a274cd7431abd53aef1.
-
web:threatfox.abuse.ch
AgendaCrypt IOC: f1e78b13e21371ecfec02e6ca8fd5344 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash f1e78b13e21371ecfec02e6ca8fd5344.
-
web:threatfox.abuse.ch
AgendaCrypt IOC: 1340bdf97aaefa2fd6dc586f84cf4f15 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash 1340bdf97aaefa2fd6dc586f84cf4f15 .
-
web:threatfox.abuse.ch
AgendaCrypt IOC: eb6fff4ee0f03ae5191f11570ff221c5 ( md5_hash ) You are viewing the ThreatFox database entry for md5_hash eb6fff4ee0f03ae5191f11570ff221c5.
-
web:www.malshare.com
The MalShare Project is a community driven public malware repository that works to provide free access to malware samples and tooling to the infomation security community.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.