MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 690c0c824323fdc545e820cf11b720c0d8dd98276a749a58f82c072fd85baffc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 690c0c824323fdc545e820cf11b720c0d8dd98276a749a58f82c072fd85baffc
SHA3-384 hash: a9750ee6dbcda567792d58b08ace0a42d1a6d20bac90e2704fceca5ff6d0e609792ff99fc6275359b850f15d6541913f
SHA1 hash: daa09b25e5ea4b69d36cbbc40e5da6252fee571f
MD5 hash: 2b3e5d74edfe6952566330a4fc90bba8
humanhash: princess-alpha-iowa-connecticut
File name:Purchase Order #GMT.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:390'759 bytes
First seen:2020-06-29 04:39:49 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:4dfJCG+Hnq0aiXlKJ346ivCZpBe7yoekbW4pTOiPj3evN7sIOwF9nzZZJ:4pJJuj16r0C7875m4pTOvN7LOwFr
TLSH A48423D6A2A4F5FE454D3122B7C223882870C75D10FEB6F6DD82A4C83536AAD5853F63
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/690c0c824323fdc545e820cf11b720c0d8dd98276a749a58f82c072fd85baffc/
Threat name:
ByteCode-MSIL.Trojan.SchInject
Create hunting rule
Status:
Malicious
First seen:
2020-06-28 18:29:00 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 690c0c824323fdc545e820cf11b720c0d8dd98276a749a58f82c072fd85baffc

(this sample)

AgentTesla

Executable exe c8cc1f9bf3d134207d5d35b40078ad7ba2d0eaa6882e7add77be921ac7a71e32

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c8cc1f9bf3d134207d5d35b40078ad7ba2d0eaa6882e7add77be921ac7a71e32
  
Dropping
MD5 1f5c8454234ab5332b59095068ef69d4

Comments