MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfd4a23a31196302f392ae184e8332376b8fa64485ade0325c7afd977109d0d4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dfd4a23a31196302f392ae184e8332376b8fa64485ade0325c7afd977109d0d4
SHA3-384 hash: 0979b955fbb4e10b152b98c245712efc68ef69e6f75401ea3596839bfa8eb5388837cc72e3f19604116c03791ec72d3f
SHA1 hash: f9a6fe686aba77fc3967fb3ce181f9e0ae193cea
MD5 hash: e17c58965baf7c5c04f40bfd70ddf832
humanhash: ten-carbon-yankee-december
File name:7778944500_pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:399'830 bytes
First seen:2020-06-09 05:22:30 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 12288:hjuPutvzwPCcWoTFRJXlAPq+nCnK+Zbl1me7duOT:hKSztStX+Pq+nCzZWe7h
TLSH 4A8423B5943277961CE0F48FB82B2B933A64BBA2D353642FA4E31C5F49D2F4971C6046
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 05:24:04 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace dfd4a23a31196302f392ae184e8332376b8fa64485ade0325c7afd977109d0d4

(this sample)

AgentTesla

Executable exe 57743bf273dcc41189e2858a1c94ad6e6c95de3784faa4e51bdfbc86900d5ac9

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 57743bf273dcc41189e2858a1c94ad6e6c95de3784faa4e51bdfbc86900d5ac9
  
Dropping
MD5 f5dd027a67a05602ff31ab9eab2ac491

Comments