MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2bb77f6842577ebb19eafc91bdbb4c8ca47f8821171621ec674584f86c59fb0f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2bb77f6842577ebb19eafc91bdbb4c8ca47f8821171621ec674584f86c59fb0f
SHA3-384 hash: 60e7b8cb194623c56df5436361b06376539a17a02d06f6d42eddaa07e593c01767c419d06f133a544ce5698723ee4e93
SHA1 hash: 8c02fa149dbebcf130ab8a47239af9649425a97e
MD5 hash: 4e7783a560f5b2b7a25b539454e25478
humanhash: hawaii-hamper-sad-november
File name:PO #367459.pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:629'715 bytes
First seen:2021-04-07 04:05:40 UTC
Last seen:2021-04-07 05:04:38 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:tU/ikyTMTNbCYrNvteW76ODgcoDz8uYsIBVYNS8k3WfVLQlW3kNBIXiX8io:tUa0RHsW+ODgFDzsvh3WfVeW3kNBGiDo
TLSH 27D4238CD653660EFC7834C08CA29D3311E7A376B35BE7F898949255C93A13B764CCA9
Reporter lowmal3
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
2
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2bb77f6842577ebb19eafc91bdbb4c8ca47f8821171621ec674584f86c59fb0f/
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2021-04-07 02:00:17 UTC
File Type:
Binary (Archive)
Extracted files:
11
AV detection:
18 of 48 (37.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=fo3x62cck57lwgpk7si33o2mrssh7cbbc4lcd3dhiwcpq3cz7mhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/2bb77f6842577ebb19eafc91bdbb4c8ca47f8821171621ec674584f86c59fb0f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 2bb77f6842577ebb19eafc91bdbb4c8ca47f8821171621ec674584f86c59fb0f

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments