MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 70d0ac82e105d689a4013f5d71c8acd65ac2e4f3f95a21a275dbf358a38e5e9f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 70d0ac82e105d689a4013f5d71c8acd65ac2e4f3f95a21a275dbf358a38e5e9f
SHA3-384 hash: 98ff231677417e677d69f0693a061eeda7fccee681b364cd473efe39d0548690ee8a5b701f281545961ee5737ac09d24
SHA1 hash: 80eb5b60513168ab6ce42a59164756b1aa989809
MD5 hash: 8f4ccb3086c7426cc18790787e106b2a
humanhash: double-alpha-pip-utah
File name:Shipping Details.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:359'868 bytes
First seen:2020-11-19 06:51:42 UTC
Last seen:2020-11-19 06:53:01 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:yEReZGibpIJPRaW1ioy2Z9QXgoJFvXnaycr/KT/Y3c1jkzCLpjucMwv7GY84F:y2wGibpI9RaTk93yJcryrxeOLpjuP3YZ
TLSH 3F742324DD63BA774319FEA594C6C5B6B0204196F3C9CA4460CEDA3FF1745E40BDEA28
Reporter cocaman
Tags:ace


Avatar
cocaman
Malicious email (T1566.001)
From: ""Recipients" <info@tnt.com>" (likely spoofed)
Received: "from vmv0.504.vuniso.ml (vmv0.504.vuniso.ml [64.225.4.222]) "
Date: "Wed, 18 Nov 2020 18:15:23 -0800"
Subject: "TNT Consignment"
Attachment: "Shipping Details.ace"

Intelligence

File Origin
# of uploads :
2
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/70d0ac82e105d689a4013f5d71c8acd65ac2e4f3f95a21a275dbf358a38e5e9f/
Threat name:
Win32.Trojan.Predator
Create hunting rule
Status:
Malicious
First seen:
2020-11-19 06:52:11 UTC
File Type:
Binary (Archive)
Extracted files:
46
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 70d0ac82e105d689a4013f5d71c8acd65ac2e4f3f95a21a275dbf358a38e5e9f

(this sample)

AgentTesla

Executable exe d08f380e6b3e9cfe407bf20656290a829765f05cecdbe122e745362b22dc7d72

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d08f380e6b3e9cfe407bf20656290a829765f05cecdbe122e745362b22dc7d72

Comments