MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aead19916c165f7dbc47808c3ac84fe17246e76c75d2a0cf55d197bd123cb2e1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: aead19916c165f7dbc47808c3ac84fe17246e76c75d2a0cf55d197bd123cb2e1
SHA3-384 hash: 131e6e709f0ced827db2bfbf9ef8d8faaa2551ec89489ad4411e81d7698de3d824119edead2bd166cea0e1443c48af6d
SHA1 hash: c0043c3f2c4cfab82e8ee8a11ae3e58af51189bc
MD5 hash: 59e9ca88abd8733257aa588b5bd79a2d
humanhash: stairway-papa-lemon-stairway
File name:updated Purchase Order.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:489'294 bytes
First seen:2021-03-01 07:17:09 UTC
Last seen:2021-03-05 08:32:08 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 12288:Ak/wv67p0loKt46Ljr99j4XXOB+LrSFXqaSQb:7wCN0yT6fJ9D4A
TLSH FAA423CA1C5329F4ED91C2EC78A052EA99BB12427BC560F41C891A6CCF141BA79D4FDE
Reporter GovCERT_CH
Tags:AgentTesla

Intelligence

File Origin
# of uploads :
13
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/aead19916c165f7dbc47808c3ac84fe17246e76c75d2a0cf55d197bd123cb2e1/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-03-01 05:12:12 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=v2wrtelmczpx3pchqcgdvscp4fzenz3moxjkbt2v2gl32er4wlqq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/aead19916c165f7dbc47808c3ac84fe17246e76c75d2a0cf55d197bd123cb2e1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace aead19916c165f7dbc47808c3ac84fe17246e76c75d2a0cf55d197bd123cb2e1

(this sample)

AgentTesla

Executable exe c8b6a81e3265d871aa1aa3b678c603cdd7679585a4be435d1fd95d650a7eaf95

  
Dropped by
AgentTesla
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c8b6a81e3265d871aa1aa3b678c603cdd7679585a4be435d1fd95d650a7eaf95
  
Dropping
MD5 7f87f7c490a765a1fc5a17072f7eddf3

Comments