MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f924d398e94d0730c58be69c94112bd74b12e9cd3d2421bfced70198ef45d287. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f924d398e94d0730c58be69c94112bd74b12e9cd3d2421bfced70198ef45d287
SHA3-384 hash: 2c6c3655c59aed5d1097d4a30bee797110f54a8f7d7bfc0e0b82fc1073fb35284a9d99f3449efbb6e8568ff545c4c92d
SHA1 hash: 6ad7df5ca57c5e1fd0470505d962942014a77bcf
MD5 hash: ecdbd802245e7ece7a67706b8ebf8e53
humanhash: angel-fourteen-wyoming-magazine
File name:DHL Shipment.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:475'952 bytes
First seen:2020-05-13 05:25:39 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 12288:rmTfx8VrGpXx/t7PPly2emHlBqDjSjfoN3L:rmLxV7/tLlvHwIfoN7
TLSH D5A423E8982E19B8ED1951F10FCD1006B55DDACC978B42FADC7D630EDD834FAC60990A
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 05:37:47 UTC
File Type:
Binary (Archive)
Extracted files:
295
AV detection:
23 of 48 (47.92%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace f924d398e94d0730c58be69c94112bd74b12e9cd3d2421bfced70198ef45d287

(this sample)

AgentTesla

Executable exe 599f4163bd14100088996bf147890c5cb35b37bc5b2daf26d06adde5b38549db

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 599f4163bd14100088996bf147890c5cb35b37bc5b2daf26d06adde5b38549db
  
Dropping
MD5 487cdab56d150a6071c5415fe28b08e0

Comments