MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b7a8ee47ffa373566aa161a4a74b2b1f75ab4f9aee4f541722cadac5199621a7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AgentTesla


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b7a8ee47ffa373566aa161a4a74b2b1f75ab4f9aee4f541722cadac5199621a7
SHA3-384 hash: c6863a2461941344566165101cb4b37320ba19942ae7a7ccde960a85ec0c12b409b7c29ba9b744ee3e78a63e4645df00
SHA1 hash: c6fc253432dd87e735595668b43dcacbacbfe1f5
MD5 hash: 8ab32f9c1b6d56cb01c2064b49f066b7
humanhash: south-summer-utah-zebra
File name:pass_code.pdf.zip.ace
Download: download sample
Signature AgentTesla
Create hunting rule
File size:373'469 bytes
First seen:2020-07-03 03:24:47 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:DnTGdyzF5CfZSv5mEt1eW+JJmJ0Hze1+A9LoT1yDTT44i9x3aWHVMiASHKQjrIM:zTTrCRSv5PEG0Hzm+gE1OT04EqwM4HK+
TLSH 8984236869369DED97CCF1EF9E4B3909902C493B9E48C191C52C7672EFD098C1F89AD0
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.26423.AceHeur.Zip.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b7a8ee47ffa373566aa161a4a74b2b1f75ab4f9aee4f541722cadac5199621a7/
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-03 02:26:15 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AgentTesla

ace b7a8ee47ffa373566aa161a4a74b2b1f75ab4f9aee4f541722cadac5199621a7

(this sample)

AgentTesla

Executable exe edd8ffd641e14804cf56763e7369936bd9aaf2a9248dd9aaa196f8f27b416dd6

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 edd8ffd641e14804cf56763e7369936bd9aaf2a9248dd9aaa196f8f27b416dd6
  
Dropping
MD5 ae8c7beac6e8f4415deb994407bd4ba2

Comments