MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 244bf337f9e996f686614920c25ca605e8af2576259fdd0c0fbd9eec45516848. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 244bf337f9e996f686614920c25ca605e8af2576259fdd0c0fbd9eec45516848
SHA3-384 hash: 5eb0a63d5c80fc2db944ba83fad27ec1ef303903b98b3899072b19bff76b22635895648347162537703d8a015f056663
SHA1 hash: 4f9462f422a38d0cb359ac0bdb1fa6adc59e068c
MD5 hash: a467dba9ae4a1f38c499c0a29af0f863
humanhash: tennessee-princess-magazine-white
File name:009876654321_pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:379'832 bytes
First seen:2020-06-12 11:35:39 UTC
Last seen:2020-06-12 12:45:36 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:1IyyiPkj1Ybt+qj6/MX/8QmBjyWJPsKwNXHjTxOqivbcvqhqYGSaN0tAQr1n0Vek:qyHPkeBPr9W9sNBxdiQoGSaqBn0Exu
TLSH 9A842347B2E2CC0EA5571564D9F44DEE021280344EDBAE32794370956AFF1E8B9EB9B0
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-12 08:56:56 UTC
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 244bf337f9e996f686614920c25ca605e8af2576259fdd0c0fbd9eec45516848

(this sample)

AgentTesla

Executable exe f46dc619f102e8a11f4ebcf3526f85676cb2d508b85ee482dc09f9286ec197f4

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f46dc619f102e8a11f4ebcf3526f85676cb2d508b85ee482dc09f9286ec197f4
  
Dropping
MD5 56bf636fc4023c53082b297009fae9e7

Comments