MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 46aa3d13101ec0141fc3e54eb1b702881c287c1e68754360eaa98b9c0f5dec94. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 46aa3d13101ec0141fc3e54eb1b702881c287c1e68754360eaa98b9c0f5dec94
SHA3-384 hash: 1fea032992e12e5e8e90af5e900135b58409e6377ba7071d5bea917586cbba680e576a83f29e76025d93ba29320a4bf9
SHA1 hash: 050c43b26cdc0c227fa95f96832a2914b21aac2b
MD5 hash: 64acffa69e11b2368def3db1ff2f3642
humanhash: blue-xray-item-low
File name:TNT Original Invoice.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:407'992 bytes
First seen:2020-08-12 12:41:56 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 12288:tDMYb9+u1TBSRq7spY4162giDjZM2EP57KrsIpk:tDMYRNBSRrpY4IJixEopk
TLSH 9C8423C0CB5E41C50DA2890BA1F3B78912D29DFF2A1705A4CB78A50DFB465F3B5268DE
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/46aa3d13101ec0141fc3e54eb1b702881c287c1e68754360eaa98b9c0f5dec94/
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-08-11 12:06:52 UTC
AV detection:
25 of 48 (52.08%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/46aa3d13101ec0141fc3e54eb1b702881c287c1e68754360eaa98b9c0f5dec94

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 46aa3d13101ec0141fc3e54eb1b702881c287c1e68754360eaa98b9c0f5dec94

(this sample)

AgentTesla

Executable exe 9241956eb6748031c6081171d747655373ffe236153dd901a663a3d24b9bf38c

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9241956eb6748031c6081171d747655373ffe236153dd901a663a3d24b9bf38c
  
Dropping
MD5 c875c56f83bb289f8fc8cc80364c0c89

Comments