MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4d6f6ca1ae09e989f507f7709226e91a1fb37e8cef625e465a289399f4d73123. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4d6f6ca1ae09e989f507f7709226e91a1fb37e8cef625e465a289399f4d73123
SHA3-384 hash: 58ea4ee57db2a055c2e2aa9f6ac6df4984569b3277729e46a23acfe854551f5ef8bcbcefd8af1a2d33910742b45fce5a
SHA1 hash: fdd00adeb09b3e06c37e66d7cb9cff3285debc00
MD5 hash: 3d0588ea20dc868e0c3986dfda2fc062
humanhash: cola-delta-snake-floor
File name:scancopy20200615_pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:395'648 bytes
First seen:2020-06-15 14:42:35 UTC
Last seen:2020-06-16 10:28:57 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:aRYR8ZOPnjyGRzkGcVZ9+JzL4yzIx9EI4malyqt6oTvJg2C7ZEFyE2SnaOpf:aRYfzqZ9IzUyzIgmalQpWhaOp
TLSH A7842362B48B32CD6B94A3D4CE55ED53329DE4B52521C7421ACBF98099E78CC674EFC0
Reporter jarumlus

Intelligence

File Origin
# of uploads :
3
# of downloads :
55
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 14:44:05 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 4d6f6ca1ae09e989f507f7709226e91a1fb37e8cef625e465a289399f4d73123

(this sample)

AgentTesla

Executable exe bb6bf1c0fb36e175528bcef7e126b0345cbaab84206b0b835c14b98787753219

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 bb6bf1c0fb36e175528bcef7e126b0345cbaab84206b0b835c14b98787753219
  
Dropping
MD5 f668c179803e2fc4bc8b420d1b08fb83

Comments