MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69539150136d9fcbd966a3f9df492c9266ad5d1c04d7f2ccf9e83611b6540800. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69539150136d9fcbd966a3f9df492c9266ad5d1c04d7f2ccf9e83611b6540800
SHA3-384 hash: 176f8655cfc18017230bb981a2c200b236e2a6125dd871b1a80bed6be875b66671a12b849e19b145935a495665236cab
SHA1 hash: a85645ece1f144bd48225c114df9b2d5a91a4795
MD5 hash: db42a8d04082f6ac80d22c6f40c237b6
humanhash: speaker-sodium-island-tennis
File name:LC201982732020_pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:374'622 bytes
First seen:2020-06-30 09:37:48 UTC
Last seen:2020-06-30 11:06:40 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:acgLdsBUzZSCVbV6TCg4EnApz4H8eqWVPC4We7YKY2seUmqxpkaNdf05qZcSu:ahdaUz/iWgTAt4FqWVDWe7YKY2s/+aNW
TLSH 438423320B5E515A0505BF0C4F7ED8DBD528098BF9617439AE2C4FD60FADADA1E29833
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/69539150136d9fcbd966a3f9df492c9266ad5d1c04d7f2ccf9e83611b6540800/
Threat name:
ByteCode-MSIL.Spyware.Negasteal
Create hunting rule
Status:
Malicious
First seen:
2020-06-30 09:39:03 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 69539150136d9fcbd966a3f9df492c9266ad5d1c04d7f2ccf9e83611b6540800

(this sample)

AgentTesla

Executable exe 350a1cceb4f399c5d7515ede00aa6c9dbf6a6d9a4b96ad87f158005d58faf567

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 350a1cceb4f399c5d7515ede00aa6c9dbf6a6d9a4b96ad87f158005d58faf567
  
Dropping
MD5 09db2d1968f0c9c5705ccec83ab4b077

Comments