MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 82b8f646380c1a4bc10d74fd5db58877cb2ff852d5ee222ffd9ea1635dbe123c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 82b8f646380c1a4bc10d74fd5db58877cb2ff852d5ee222ffd9ea1635dbe123c
SHA3-384 hash: 9d03d914c2b8585458bb6f772ae17cbb0dae3dcbcac4138b06c2d90f8fd3ee65870a1a37bfc1ddf66926f0c0ac4ced74
SHA1 hash: 529aa64ed2082e808c1adecd6e8ad56d2c5298d2
MD5 hash: 06721b63ce34c35c8046ce63b987470e
humanhash: violet-gee-leopard-juliet
File name:PO_NX-L1-15-00001.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:493'333 bytes
First seen:2020-07-29 13:38:49 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 12288:wdHjOI7H67GEPQ2ESfKMDHd/n0/ptI9LbcsFWovi3XBA:8jOI7a75Qb0Vn0udNvoX2
TLSH 0EA423B44A3EFDB64A03B68218513E771FF59FBBF8725DE535608B108297B6D0638604
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/82b8f646380c1a4bc10d74fd5db58877cb2ff852d5ee222ffd9ea1635dbe123c/
Threat name:
ByteCode-MSIL.Trojan.Skeeyah
Create hunting rule
Status:
Malicious
First seen:
2020-07-29 13:40:09 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/82b8f646380c1a4bc10d74fd5db58877cb2ff852d5ee222ffd9ea1635dbe123c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 82b8f646380c1a4bc10d74fd5db58877cb2ff852d5ee222ffd9ea1635dbe123c

(this sample)

AgentTesla

Executable exe 8de5b231add82c95e720fb340206a50034e9ac1de1108977389538f37a5be45b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8de5b231add82c95e720fb340206a50034e9ac1de1108977389538f37a5be45b
  
Dropping
MD5 dca1db416954bda2897bea5d0535f231

Comments