MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5e26578f49373ffa3ecb418a99b46457f0a5e657032c3c3bc583f43575741132. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5e26578f49373ffa3ecb418a99b46457f0a5e657032c3c3bc583f43575741132
SHA3-384 hash: d63bc73f1a43526849197915122b079737adb601bcb2e0d796c6824870d357c991d0a7ec27205e7d6ee194ff8d4f7eb7
SHA1 hash: 24b04b57f8fab562cd0632351355435e3bd373cc
MD5 hash: 311ad7decc9f4652fe2368bfc4f52b07
humanhash: bulldog-cardinal-social-orange
File name:CAO DUONG CO., LTD Quotation.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:385'664 bytes
First seen:2020-12-01 05:59:39 UTC
Last seen:2020-12-01 08:15:49 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:s/abWuEulhbzzEfhvaF94JBxgDREp7TpybtXF9YDVRUFeFCyLFdynOOfzJyx:yabWuBlhbHIZVJ/O2xp2tXF9YDVAcCyT
TLSH E58423781607F0DF11E7AD300E28F9F32A985075AF28D7C271531A0BE96B91562FA9F4
Reporter GovCERT_CH

Intelligence

File Origin
# of uploads :
3
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5e26578f49373ffa3ecb418a99b46457f0a5e657032c3c3bc583f43575741132/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-12-01 01:10:02 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5e26578f49373ffa3ecb418a99b46457f0a5e657032c3c3bc583f43575741132

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 5e26578f49373ffa3ecb418a99b46457f0a5e657032c3c3bc583f43575741132

(this sample)

AgentTesla

Executable exe d0d3a618ba0aa2b362ac76498c5c801091b8555ae01d9ab709a291cc62827cbd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d0d3a618ba0aa2b362ac76498c5c801091b8555ae01d9ab709a291cc62827cbd
  
Dropping
MD5 52a9d101b18ba10c0dac9f8998f8b7ff

Comments