MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 84ff488c3f5e807a4f0bd00141a0ffbf40a617fc84b17f4545b2ead66e3d4d1b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 84ff488c3f5e807a4f0bd00141a0ffbf40a617fc84b17f4545b2ead66e3d4d1b
SHA3-384 hash: c631179a03681eb9afd5a6d4b8af57bb04ce7ef4deac8a9a497f9278222ecfd3f1e65fa0245af00fa664b90ed72e14f5
SHA1 hash: 7472efbb0dc4e89e5266d3759708203c4de07b82
MD5 hash: 28981f94d6aa96ae922b7c6a2637dbc9
humanhash: ceiling-don-alanine-solar
File name:PAYMENT 1567_0001.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:413'876 bytes
First seen:2020-05-11 04:26:47 UTC
Last seen:2020-05-11 05:17:04 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:jL6YGJFPPIOCimTqGfkw+8GI9x3OgKJPG:3RiPPHxrGsZ70xgPG
TLSH 6894232CDCD759511016F2196622408C0CBEC34CF49F52CACDE9DDADE795BCBB2869A3
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27114.AceHeur.Pif.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Autorun
Create hunting rule
Status:
Malicious
First seen:
2020-05-11 04:35:24 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 84ff488c3f5e807a4f0bd00141a0ffbf40a617fc84b17f4545b2ead66e3d4d1b

(this sample)

AgentTesla

Executable exe 8eeca9884be4d017c4c5cf62fd5b080efd5cf3e9c85d70c518ae31d796713110

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8eeca9884be4d017c4c5cf62fd5b080efd5cf3e9c85d70c518ae31d796713110
  
Dropping
MD5 32916faaddae9b5d16ca910ad044646c

Comments