MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 838b35acbf604d3b7039ddfe08b99b1ae558a73223f0d670ca6a3d8cc924dfdc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 838b35acbf604d3b7039ddfe08b99b1ae558a73223f0d670ca6a3d8cc924dfdc
SHA3-384 hash: c1fd190e17991b1832b9273fca81f7cfa6956e669983e2d16c4839f8b7f67e61272949d673d2a845bd52ed843e69349c
SHA1 hash: 4fdc4e1fedf100358dfb4b3441af37448fe06202
MD5 hash: 4303877df8d00fd87ad9d10ffdfb24a7
humanhash: east-harry-high-zulu
File name:992898-20200611_pdf.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:407'335 bytes
First seen:2020-06-12 08:59:45 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:47ZWCeAi6T+9VfKBJLtCLDTdC+XUlUpomEC5vQN4QZWBkcc0zDJFTMgUA8mPt:Asn98f4fiLWw65DbMZA8m1
TLSH C4842393B0893A93CE2E0E578D54FE0C395CE2BB50F9FCD441BA2D9A52B371646B3464
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Infostealer.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-06-12 09:01:03 UTC
AV detection:
16 of 29 (55.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace 838b35acbf604d3b7039ddfe08b99b1ae558a73223f0d670ca6a3d8cc924dfdc

(this sample)

AgentTesla

Executable exe f965b25b5c7b1c8449cc8744823757e48350b19baec85c030d6c0ad9a5734424

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f965b25b5c7b1c8449cc8744823757e48350b19baec85c030d6c0ad9a5734424
  
Dropping
MD5 f27442641c3d4203ae6a4e16952c0979

Comments