MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fab28bad27d8ae424e26d992bda2d459774c3cdf2e7941186f056bb7f2cbca34. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fab28bad27d8ae424e26d992bda2d459774c3cdf2e7941186f056bb7f2cbca34
SHA3-384 hash: 5922818c7beed6a0e43876848c38640bd74b0caa1510620de0494c89272e89b9843466ca4ced29f66f7d2075c9614429
SHA1 hash: 8d279d41e1d4d435ef849152d91f588cd037c875
MD5 hash: dce4ca0085e0aebcfe60a243c65ad947
humanhash: louisiana-pluto-summer-kilo
File name:Payment Receipt.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:434'523 bytes
First seen:2020-05-18 06:09:41 UTC
Last seen:2020-05-18 10:34:27 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:pVYwdccn3AzS5YGNU592E3lKFBJSvsMnkvno4p01:pVY2wz0lylKFBJz3Ve1
TLSH F894233D6C89E8E3677D778243511F3B9E3AB164792E8E3AF738A9B130169137846710
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-18 06:35:58 UTC
File Type:
Binary (Archive)
Extracted files:
294
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace fab28bad27d8ae424e26d992bda2d459774c3cdf2e7941186f056bb7f2cbca34

(this sample)

AgentTesla

Executable exe 38aa2936a2a2a4f49cf37bb615fc27fcfe2df2b632fee7b906827afd016dc6b7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 38aa2936a2a2a4f49cf37bb615fc27fcfe2df2b632fee7b906827afd016dc6b7
  
Dropping
MD5 320765d6317f9db462570de6b8748f82

Comments