MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3b896ca5890975d31c50c76fe541821b2b3b9e54e89c17df39412cd043ed72eb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3b896ca5890975d31c50c76fe541821b2b3b9e54e89c17df39412cd043ed72eb
SHA3-384 hash: ce32c2333eb4b60e66a8b84d4303db5ee2e069abf5027bf10d32a36c83f0837c3a8ccad8f9be5a2a689deeb976cc34f1
SHA1 hash: bda849f37fb6eeb5873278c1409a6be81f84d807
MD5 hash: 2b950e592ef36f555966eb53b856c046
humanhash: high-tango-iowa-princess
File name:PO 515071 PDF.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:674'249 bytes
First seen:2021-01-11 08:43:12 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 12288:dD3tQABOjigb9l2GHpdtTXd8JKNanDxyXvn8WI69Z1sOUZSl6KiVBhPLV0FE8CC:dD3Yjtlj/70nla/f9Z1svKiVBhCFMC
TLSH D5E4330545637EC37A4211CB89075BFC38B1E600B7796B09FA1DF88E47B468B27B849E
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
1
# of downloads :
117
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3b896ca5890975d31c50c76fe541821b2b3b9e54e89c17df39412cd043ed72eb/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2021-01-11 08:44:06 UTC
AV detection:
8 of 46 (17.39%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/3b896ca5890975d31c50c76fe541821b2b3b9e54e89c17df39412cd043ed72eb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 3b896ca5890975d31c50c76fe541821b2b3b9e54e89c17df39412cd043ed72eb

(this sample)

AgentTesla

Executable exe a59d40703d344673f54233a3849c2d61268ff3f99ef2a4f090ddb93af5ad8743

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a59d40703d344673f54233a3849c2d61268ff3f99ef2a4f090ddb93af5ad8743
  
Dropping
MD5 38de9b064bdcf5650746d10c3eb6f82f

Comments