MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2ca3c65c21b0dd5bf36016b1e0fd2720eed0bbe10db3868bde8fedf60f3068e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d2ca3c65c21b0dd5bf36016b1e0fd2720eed0bbe10db3868bde8fedf60f3068e
SHA3-384 hash: d97e0396958104412f1a3b9d87f51dee6b88079b8b58bd3b427212854dbc09b902c1defa77cd314076050c412c04ee4f
SHA1 hash: a60a72dcdaacdcc1cd9de5cc2800aafc91834db7
MD5 hash: 4728b419157b9c52545ae115e54c267a
humanhash: equal-gee-sodium-kansas
File name:TNT Original Invoice.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:168'532 bytes
First seen:2020-05-25 05:21:28 UTC
Last seen:2020-05-25 05:42:37 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 3072:39LbvPrlbpSiNrf+UsihL/hcgO3GPR6sVBNdZqKpk1ghU:Fbnrtpn+Udw3SgsVqKy1T
TLSH 8DF3235EBFF21007FB6C311F82EB449F82D61A26B3C6B99555159D499F05308EFA32E0
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Autorun
Create hunting rule
Status:
Malicious
First seen:
2020-05-25 07:21:01 UTC
File Type:
Binary (Archive)
Extracted files:
1
AV detection:
17 of 31 (54.84%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace d2ca3c65c21b0dd5bf36016b1e0fd2720eed0bbe10db3868bde8fedf60f3068e

(this sample)

AgentTesla

Executable exe 9c41470416c33f1ac91bdf39d8bbec407e0214456f9d298e736cd62586345676

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9c41470416c33f1ac91bdf39d8bbec407e0214456f9d298e736cd62586345676
  
Dropping
MD5 9edd8530d1b0fb8dc910e841f8ddce84

Comments