MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 731a031a22aa4bae8402db2d6a9792ceef6f51f86f13bfb01b14fe03d533b1e7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 731a031a22aa4bae8402db2d6a9792ceef6f51f86f13bfb01b14fe03d533b1e7
SHA3-384 hash: 18a6944b3e7371f6493311ff06674ca081522c548a38feb955d752d06652863236a955c39430cadfc2ed43f3999bfcd0
SHA1 hash: f156619919c7c4d5a467673b4f543f0336499e7a
MD5 hash: 0a6d07b4c470cb5cbb502486b735c19c
humanhash: butter-speaker-harry-fanta
File name:AWB & Shipping Documents.Img.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:458'676 bytes
First seen:2021-03-12 14:44:41 UTC
Last seen:2021-03-26 09:30:42 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:UVbaQsHNRHnKh59xckjkVDmdS251eEm2Wh1/:UVb8HNtnKT9xBkZmdSW1E2Wh1/
TLSH C2A423D3EA31084AB51C7786F7C8B18D1279C29BAC4916DEB4F37658876000B7BDD91E
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
291
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/731a031a22aa4bae8402db2d6a9792ceef6f51f86f13bfb01b14fe03d533b1e7/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-03-07 15:55:38 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=omnaggrcvjf25bac3mwwvf4sz3xw6upyn4j37ma3ct7ahvjtwhtq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.10
Link:
https://yomi.yoroi.company/submissions/731a031a22aa4bae8402db2d6a9792ceef6f51f86f13bfb01b14fe03d533b1e7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 731a031a22aa4bae8402db2d6a9792ceef6f51f86f13bfb01b14fe03d533b1e7

(this sample)

AgentTesla

Executable exe 3862ce529663c434d80c6870db4e0946bd6aaf60e1ff5b05bbd9c4ef066a8838

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3862ce529663c434d80c6870db4e0946bd6aaf60e1ff5b05bbd9c4ef066a8838
  
Dropping
MD5 5554f5bc0c98a89d9b45673858e51ecb

Comments