MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 308202d51857f104f2ebed198a63fa104dd8c8fbe98372bfdddd63612ebc2846. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 308202d51857f104f2ebed198a63fa104dd8c8fbe98372bfdddd63612ebc2846
SHA3-384 hash: ac67f839fe173ba1362e70886a2c3e4228e51a6dddbc506529a3fa34dc1039b619d91c295848162c9a5b2f8f431c25b5
SHA1 hash: c0615839e3c64655f15edbb66ae655bc1f271881
MD5 hash: f15580da71d29b0034652998130b8a75
humanhash: three-video-alabama-zebra
File name:TNT EXPRESS CONSIGNMENT.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:464'982 bytes
First seen:2020-04-20 05:20:22 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:WkXpA1lRsONSZJIgDIKtfXGLLTgQBf2UFszYdpF7NWqU9ot9sLDLqvws23b1XUeh:9X61lRZ8IgX8gQx2903UCO4ws2ZXGHo
TLSH 73A42373A8678FE370D29364681118E204636CDAA2E6FD70B23743CCE9795CB87456DE
Reporter cocaman
Tags:ace


Avatar
cocaman
Malicious email
From: TNT EXPRESS CONSIGNMENT <diamond@tnt.com>
Received: from vpsbizmugi01.dotcomindonesia.com (vpsbizmugi01.dotcomindonesia.com [103.89.2.242])
Date: Mon, 20 Apr 2020 10:37:06 +0700
Subject: TNT Express delivery Consignment Notification

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27669.AceHeur.Exp.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-04-20 05:35:34 UTC
File Type:
Binary (Archive)
Extracted files:
50
AV detection:
22 of 48 (45.83%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 308202d51857f104f2ebed198a63fa104dd8c8fbe98372bfdddd63612ebc2846

(this sample)

AgentTesla

Executable exe 3dff39d813e03872451b215b08a74965aa5f1804eddd112ab8a9126c25461164

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3dff39d813e03872451b215b08a74965aa5f1804eddd112ab8a9126c25461164

Comments